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Abstract. We extend the higher-order termination method of dynamic dependency pairs 
to Algebraic Functional Systems (AFSs). In this setting, simply typed lambda-terms with 
algebraic reduction and separate /3-steps are considered. For left-linear AFSs, the method 
is shown to be complete. For so-called local AFSs we define a variation of usable rules and 
an extension of argument filterings. All these techniques have been implemented in the 
higher-order termination tool WANDA. 



1. Introduction 

An important method to (automatically) prove termination of first-order term rewrite 
systems is the dependency pair approach by Arts and Giesl [2]. This approach transforms a 
term rewrite system into groups of ordering constraints, such that rewriting is terminating 
if and only if the groups of constraints are (separately) solvable. These constraints can 
be simplified using for instance argument filterings and usable rules [21 [Til LE] . Various 
optimisations of the method have been studied, see for example [Til [TO] . 

This paper contributes to the study of dependency pairs for higher-order rewriting. It is 
not easy to adapt the approach to a higher-order setting, primarily due to the presence of 
/3-reduction. A first, very natural extension to Nipkow's HRSs (higher-order rewrite systems) 
is given in |35j , but it relies on the subterm property. Due to this property it is impossible 
to define optimisations like argument filterings. Moreover, unlike the first-order case, the 
method is not complete: a terminating system may well have an infinite dependency chain. 

Since then, the focus of higher-order dependency pairs has been on the so-called static 
style. This style imposes limitations on the rewrite rules which allow the subterm property 
to be dropped. For static dependency pairs, too, there are no completeness results available. 

Here we return to the original, dynamic style of dependency pairs, and show how the 
subterm property can be weakened. We introduce variations of usable rules and argument 
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filterings, and use weakly monotonic algebras and recursive path orderings to orient the 
resulting constraints. While special interest is reserved for the class of so-called local systems, 
the core technique is defined without restrictions, and is complete for left-linear systems. 

Unlike previous approaches, we do not consider rewriting modulo /3/rj (Nipkow's HRSs 
[30]). but with /3-reduction as a separate step (Jouannaud and Okada's AFSs [IB]). Although 
higher-order path orderings are commonly studied in the setting of AFSs \19\ 0] , and it is 
the only style of higher-order rewriting which currently appears in the annual termination 
competition [38], there is so far little work on dependency pairs for this formalism. 

This paper is an extended version of [23], with complete proofs and some new features. 

Paper Setup We briefly discuss the ideas from studies of dependency pairs for HRSs and 
also for applicative systems in Section[2] In Section[3]we recapitulate the AFS formalism, and 
in Section [4] we give a brief overview of the dependency pair framework for first-order term 
rewriting. Basic (unrestricted) definitions of higher-order dependency pairs, dependency 
chains, the dependency graph and reduction orderings are discussed in Section [5j 

In order to obtain stronger results, we then introduce a restriction "local", which many 
common AFSs satisfy, and define formative rules (a variation of usable rules) for local AFSs. 
We show how the results from Section [5] can be strenghtened for local systems. 

To find reduction orderings for dependency pair constraints, Section [7] discusses two 
approaches: first, we will see how dependency pairs interact with weakly monotonic algebras, 
and then we define argument functions, a generalisation of argument filterings. 

In Section [8] we discuss some improvements when dealing with non-collapsing dependency 
pairs; for example, in this setting we can use the subterm criterion and usable rules. Section[9] 
summarises all results, both for local and non-local systems, in a ready-to-use algorithm. 



In Section 10 we discuss how the theory in this paper can be used for polymorphic and 



otherwise infinite systems, and how the static and dynamic dependency pair approaches can 



be combined. Experimental results with our tool WANDA are presented in Section 11 



2. Background and Related Work 

In this section, we discuss the existing work on higher-order dependency pairs. 

The existing work on higher-order dependency pairs can roughly be split along two axes. 
On the one axis, the higher-order formalism; we distinguish between applicative rewriting, 
rewriting modulo j3 (HRSs), and with (3 as a separate step (AFSs). On the other the style of 
dependency pairs, with common styles being dynamic and static. Figure [T] gives an overview. 
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Figure 1: Papers on Higher Order Dependency Pairs 

The dynamic and static approach differ in the treatment of leading variables in the right-hand 
sides of rules (subterms x ■ s± ■ ■ ■ s n with n > and x a free variable). In the dynamic 
approach, such subterms lead to a dependency pair; in the static approach they do not. 
First-order techniques like argument filterings, the subterm criterion and usable rules are 
easier to extend to a static approach, while equivalence results tend to be limited to the 
dynamic style. Static dependency pairs rely on certain restrictions on the rules. 
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Dependency pairs for applicative term rewriting In applicative systems, terms are 
built from variables, constants and a binary application operator. Functional variables may 
be present, as in x ■ a, but there is no abstraction, as in Ax. x. There are various styles of 
applicative rewriting, both untyped, simply typed, and with alternative forms of typing. 

A dynamic approach was defined both for untyped and simply-typed applicative systems 
in [25], along with a definition of argument filterings. A first static approach appears in [27] 
and is improved in [28]; the method is restricted to 'plain function passing' systems where, 
intuitively, leading variables are harmless. Due to the lack of binders, it is also possible to 
eliminate leading variables by instantiating them, as is done for simply-typed systems in [I]; 
in [16], an uncurrying transformation from untyped applicative systems to normal first-order 
systems is used. These techniques have no parallel in rewriting with binders. 

Unfortunately, strong though the results for applicative systems may be, they are not 
directly useful in the setting of AFSs, since termination may be lost by adding A-abstraction 
and /3-reduction. For example, the simply-typed applicative system app • (abs • F) ■ x — > F • x, 
with F:i=>u functional variable, x : i a variable, and app : i =^ i =^ t, abs : (l =4> l) =4> i 
constants, is terminating because in every step the size of a term decreases. However, adding 
A-abstraction and /3-reduction destroys this property: with oj = abs • (Ax. app • x ■ x) we have 
app • oj • oj = app • (abs • (Ax. app • x • x)) • oj — > (Ax. app • x • x) ■ oj — > app • oj ■ oj. 

Let us move on to rewriting with binders; most results here are on Nipkow's HRSs. 

Dynamic Dependency Pairs for HRSs A first definition of dependency pairs for HRSs 
is given in [35] . Here termination is not equivalent to the absence of infinite dependency 
chains, and a term is required to be greater than its subterms (the subterm property), which 
makes many optimisations impossible. In |23j (extended abstract) we have discussed how 
the subterm property may be weakened by posing restrictions on the rules, and in |24j . the 
short version of this paper, we have explored an extension of the dynamic approach to AFSs. 

Static Dependency Pairs for HRSs The static approach in [27] is moved to the setting 
of HRSs in [26], and extended with argument filterings and usable rules in [36] ■ The static 
approach omits dependency pairs /"(/) ~> x • r with x a variable, which avoids the need for 
a subterm property, but it allows bound variables to become free in the right-hand side of a 
dependency pair. The technique is restricted to plain function passing HRSs. A system with 
for instance the (terminating) rule h(g(Ax. F(x))) — > F(a) cannot be handled. Moreover, 
the approach is not complete: a terminating AFS may have a static dependency chain. 

The definitions for HRSs \35\ [2"6"] do not immediately carry over to AFSs, since AFSs may 
have rules of functional type, and /3-reduction is a separate rewrite step. A short paper by 
Blanqui [3] introduces static dependency pairs on a form of rewriting which includes AFSs, 
but it poses some restrictions, such as base-type rules. The present work considers dynamic 
dependency pairs for AFSs and is most related to [35], but is adapted for the different 
formalism. Our method conservatively extends the one for first-order rewriting and provides 
a characterisation of termination for left-linear AFSs. We have chosen for a dynamic rather 
than a static approach because, although the static approach is stronger when applicable, 
the dynamic definitions can be given without restrictions. The restrictions we do provide, to 
weaken the subterm property and enable for instance argument filterings, are optional. We 



will say some words about integrating the static and dynamic approaches in Section 10 
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3. Preliminaries 



In this section, we present the formalism of Algebraic Functional Systems (AFSs). 

We consider higher-order rewriting as defined originally by Jouannaud and Okada |18j . 
also called Algebraic Functional Systems (AFSs). Terms are built from simply-typed 
variables, abstraction and application (as in the simply-typed A-calculus), and also from 
function symbols which take a fixed number of arguments. Terms and matching are modulo 
a, and every AFS contains the /3-reduction rule. Several variations of the definition of AFSs 
exist; here we roughly follow |37| Chapter 11.2.3], which coincides with the format currently 
used in the higher-order category of the annual termination competition [38j. 




Types and Terms Assuming a set B of base types, the set of simple types (or just types) is 
generated using the binary type constructor =>, according to the following grammar: 



The arrow operator is right-associative. Types are denoted by a, r, . . . and base types 

by i, k A type with at least one occurrence of =^ is called a functional type. A type 

declaration is an expression of the form [o~\ X . . . X a n ] =^r with r and all Oi types; we write 
just t if n = 0. Type declarations are not types, but are used for typing purposes. 

We assume a set V, consisting of for each type infinitely many typed variables, written 
as x , y , z , . . . . We further assume a set T , disjoint from V, consisting of function symbols, 
equipped with a type declaration, and written as /, g, . . . or using more suggestive notation. 
To stress the type (declaration) of a symbol a we may write a : a. The set of terms over J- 
consists of expressions s for which we can infer s : a for some type a using the clauses: 

(var) x : a if x : a £ V 

(app) s ■ t : t ifs:cr=^T and t : a 

(abs) Ax. s:<t=^t if x : a G V and s : r 

(fun) f(si, ... ,s n ) : t \i f : [oi x . . . x o n ]=>T e F and s\ : <J\, . . . , s n : cr n 
Terms built using these clauses are called respectively a variable, an application, an ab- 
straction, and a functional term. Note that a function symbol f : [a\ x . . . x a n ] =^r takes 
exactly n arguments, and r may be a functional type. The A binds occurrences of variables 
as in the A-calculus, and term equality is modulo a-conversion (bound variables may be 
renamed) . A variable in s which is not bound by some A is free, and the set of free variables 
of s is denoted by FV(s). Application is left-associative. Let head( ) denote the head of an 
application, so head(s ■ t) = head(s) and head(s) = s for non-applications. 

A substitution [x := s\, with x and s non-empty finite vectors of equal length, is the 
homomorphic extension of the type-preserving mapping x i— ¥ s from variables to terms. 
Substitutions are denoted 7, 5, and the result of applying 7 to a term s is denoted 57. The 
domain dom(7) of 7 = [x := s\ is {x}. Substituting does not capture free variables. 

Let O a : a be a fresh symbol for every type a. A context C[] is a term with a single 
occurrence of some O a . The result of the replacement of O a in C[] by a term s : a is denoted 
by C[s]. Such replacements may capture free variables. For example, (Ax. y)[y := x] = Xz. x, 
but for C[] = Ax. U a we have C[x] = Ax. x. 

We say t is a subterm of s, notation s > t, if s = C[t] for some context C. If in addition 
C 7^ O a , then t is a strict subterm of s, notation s D> t. 

Rules and Rewriting A rewrite rule over a set of function symbols J 7 is a pair of terms 
I — > r over T such that / and r have the same type, and all free variables of r also occur in 




T::=B\ T=^T 
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I. In j21] some termination- preserving transformations on the general format of AFS-rules 
are presented. Using these results, we can additionally assume that a left-hand side I is of 
the form f(h, ...,/„)• l n +i ■ ■ ■ l m (with m > n > 0), and does not contain subterms of the 
form (Ax. s) • t. (Many AFSs are defined in this way already.) Note that we do not assume 
T)- normal or r/-exanded forms, and that we may have rules of functional type. 

Given a set of rewrite rules 1Z, the rewrite relation — >n on terms is given by: 
(rule) C[^7] ~~ >K C[ r 7] with / — > r £ 7Z, C a context, 7 a substitution 

(beta) C[(\x.s)-t] C[s[x := t}\ 

We sometimes use the notation s — >p t for a rewrite step using (beta). A headmost step is 
a reduction s — ^ t using either clause, where C has the form D ff • s± • • • s n with n ^> 0. 

An algebraic functional system (AFS) is a pair (J-, TV) consisting of a set of function 
symbols J- and a set 1Z of rewrite rules over T\ it is often specified by giving only 1Z. 

A function symbol / is a defined symbol of an AFS if there is a rule with left-hand side 
f(h, . . . ,l n ) ■ l n+ \ ■ ■ ■ l m , and a constructor symbol if not. The sets of defined and constructor 
symbols are denoted by D and C respectively. A rewrite rule I — > r is left-linear if every 
variable occurs at most once free in I; an AFS is left-linear if all its rewrite rules are. A rule 
I — > r is collapsing if head(r) is a variable. A term s is called terminating if every reduction 
sequence starting in s is finite; an AFS is terminating if all its terms are. 

We assume that an AFS has only finitely many rules. In Section [10. 2| we shortly discuss 
how to use dependency pairs to prove termination of AFSs with infinitely many rules. 

Example 3.1. The following AFS twice is the running example of this paper. It has the 
following four function symbols: o : nat, s : [nat] =^ nat, I : [nat] =^ nat, and twice : [nat=^> 
nat] =^ nat=^ nat. There are three rewrite rules: 

l(o) -> o 
l(s(n)) — > s(twice(Ax. \(x)) ■ n) 
twice(F) -> Xy.F-(F-y) 

Recall that we also have /3-reduction steps. The symbol I represents the identity function on 
natural numbers. This system is terminating, but this is not trivial to prove; neither recursive 
path orderings like HORPO [19J and CPO [1], nor a static dependency pair approach, can 
handle the second l-rule, due to the subterm l(x). The static approach gives a constraint 
l"(s(n)) >- $(x), which is impossible to satisfy because >- must be closed under substitution, 
and s(n) might be substituted for the free variable x. CPO gives a similar problem. 

4. The First-Order Dependency Pair Approach 

In this section, we recall the dependency pair approach for first- order rewriting. We emphasise 
those parts which are relevant for our higher-order approach. 

We assume that first-order term rewrite systems (TRSs) are already known; they can 
also be thought of as AFSs where all function symbols have a type declaration [o x . . . x o] =>• o 
and where terms are formed without clauses (abs) and (app). In this section we recall 
those definitions and results from the theory of dependency pairs for TRSs that we will 
generalize or adapt to the higher-order setting in this paper. The definitions here are close to 
those in [13]; our set-up is in between the one for the dependency pairs approach [2] and the 
dependency pairs framework [10] . This section is also meant to give additional background 
for those not familiar with dependency pairs. 
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4.1. Motivation. Two important properties of the termination method using dependency 
pairs are that it is suitable for automation, and that it can be used to prove termination of 
TRSs which are not simply terminating. A (well-known) example of such a TRS is: 

minus(x,o) — > x quot(o, s(y)) — > o 

minus (s (x), s(y)) — > minus(x,y) quot(s(x), s(y)) — > s(quot(minus(x, y), s(y))) 

A TRS is simply terminating if it can be proved terminating using a reduction ordering >- (a 
well-founded ordering on terms which is both monotonic and closed under substitution) that 
satisfies the subterm property, which means that f(s\,..., s n ) >z Si for every i £ {1, . . . , n}. 



4.2. Dependency Pairs. An intuition behind the dependency pair approach is to identify 
those parts of the right-hand sides of rewrite rules which may give rise to an infinite reduction. 
Suppose we have a minimal non-termating term t, so a non-terminating term where all proper 
subterms are terminating. An infinite reduction from t has the form t —>* lj — > — > . . . 
with J->ra rewrite rule. Then, a minimal non-terminating subterm of r^ has as root-symbol 
a defined symbol from the pattern of r. Thus, we are interested in subterms of right-hand 
sides of rewrite rules with a defined symbol at the root. Such subterms are called candidate 
terms of r. 

We obtain J 7 " by adding to each symbol / in the signature J 7 of a first-order TRS a 
symbol /" with the same arity. The dependency pairs of a rewrite rule f(h, ■ ■ ■ , l n ) — > r are 
all pairs ft(h, . .. ,l n ) ~> dKpi, ■ ■ ■ iPm) with r t> gipii ■ ■ ■ ,Pm 

), and g a defined symbol, and 

g(pi, ■ ■ ■ ,Pm) n ot a subterm of some l{. The set of all dependency pairs of a TRS (J 7 , TV) is 
denoted by DP (ft). 

The quot-example has the following dependency pairs: 

minus^(s(x), s(y)) ~> minus"(x,y) 
quotS(s(x),s(y)) ~> quot^ (minus (x, y), s(y)) 
quot^(s(x), s(y)) ~> minus"(x,y) 

The first and third rewrite rule do not give dependency pairs, because their right-hand sides 
do not contain defined symbols. The fourth rule gives two different dependency pairs. 
A dependency chain is a sequence [(Ji ~» pi, Si, ti) \ i € N], such that for all i: 

(1) li^ Pi £ DP(ft); 

(2) Si = kji and ti = piji for some substitution 7$; 

(3) ti — t-^j Si+i- 

Since ti has the form /"(«) and the marked symbol /" is not used in any rule, the reduction 
ti — Sj+i does not use headmost steps. The chain is minimal if all ti are terminating 
under Termination of a TRS can be characterized using dependency chains: 

Theorem 4.1 ([2j). A TRS is terminating if and only if it does not admit a minimal 
dependency chain. 



A higher-order generalization of this result is provided in Theorems 5.7 and 5.9 
Example 4.2. The TRS nats(ra) —> cons(n, nats(s(n))) has an infinite dependency chain 

( nats s (n) ~> nats tt (s(n)) , nats s (o) , nats tt (s(o)) ), 
( nats s (n) ~> nats tt (s(n)) , nats"(s(o)) , nats tt (s(s(o))) ), 

corresponding to the infinite reduction nats(o) — > nats(s(o)) — > nats(s(s(o))) —>•... 
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4.3. Using a Reduction Pair. A TRS without infinite dependency chain is terminating. 
Absence of infinite dependency chains can be demonstrated with a reduction pair. This is a 
pair (y, y) of a quasi-order and a well-founded order, such that: 

• y and y are compatible: either y ■ y is included in y, or y ■ y is; 

• y and y are both stable (preserved under substitution); 

• y is monotonic (if s y_t, then C[s] y C[t]). 

Theorem 4.3 ([2]). ^4 is terminating, if there exists a reduction pair (y,y) such that 
I y p for all dependency pairs I ~> p, and I y r for all rules I — >• r. 

Example 4.4. The quot example is terminating if there is a reduction pair satisfying: 

minus(x,o) y x minus" (s(:e), s(y)) y minus"(x,y) 

minus(s(x), s(y)) y minus(x,y) quot"(s(a;), s(y)) y quot"(minus(x, y), s{y)) 

quot(o, s(y)) y o quot"(s(a;), s(y)) y minus"(x,y) 

quot(s(x),s(y)) y s(quot (minus (x, y), s(y))) 

These constraints are oriented with a polynomial interpretation with [minus (x, y)J = 
[minus«(x,y)fl = [a], [quotfoy)] = [quot«(a;,y)] = [xj + {yj, [s(x)j = [xj + 1, [o] = 0: 

X > X X + 1 > X 

x + 1 > x x + y + 2 > x + y + 1 

y+l>0 x + y +2 > x 

x+y+2 > x+y+2 

Note that we needed dependency pairs to use an interpretation like this: the resulting 
ordering y is not monotonic, since [minus (s, t)J = [minus(s, u)J even if t y u. 

Rather than orienting all dependency pairs at once, we can use a step by step approach. 
Let a set of dependency pairs V be called chain-free if there is no minimal dependenc y cha in 
using only pairs in T^Jj Note that is chain-free. The following result has Theorem 
a higher-order counterpart. 



5.16 



as 



Theorem 4.5. A set V = V\ W V2 is chain-free ifVi is chain-free, and there is a reduction 
pair (y, y) such that I y p for IvpGPi, I y p for I ~> p £ V2 and I y r for I — > r E 1Z. 



4.4. Argument Filterings. In order to obtain a reduction pair, there are two ways we 



could go: either we use approaches like the polynomial interpretations given in Example 4.4 
which directly give us a pair (y, y) (where y may be non- monotonic), or we use an existing 
reduction ordering or pair and adapt it with argument filterings. An argument filtering 
is a function tt which maps terms of the form f(x\, . . . ,x n ) with / £ J 7 " either to a term 
f- K {xi 1 , . . . , Xi m ) or to one of the x%. An argument filtering is applied to a term as follows: 

7f(/(si,...,s n )) = /7r(7f(su ),..., 7f(s im ))) if n(f(x)) = U(x ir ,...,Xi m ) 
lf(f(s 1 ,...,s n )) = W(si) if n(f(x)) = Xi 

7f (x) = x if x a variable 

Phrased differently, 7f(/(si, . . . , s n )) = w(f(xi, . . . ,x n ))[x\ := vf(si), ...,x n := W(s n )]. Note 
that an argument filtering works both on unmarked and on marked symbols. 

Using argument filterings, we can eliminate troublesome subterms of the dependency 



pair constraints. To this end, we use the following result, which corresponds to Theorem 7.8 
4n the language of [TD], this corresponds to finiteness of the DP problem (V, 0, 1Z, minimal). 
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Theorem 4.6. Given a reduction pair (>, >) and an argument filtering tt, define: s yt iff 
7f(s) > Tf(t) and s y t iff 7f(s) > vf(i)- Then (y, y) is a reduction pair. 

Example 4.7. Recall the constraints given in Example |4.4| We use the argument filtering 
with 7r(minus(x, y)) = x, 7r(quot(x, y)) = quot 7r (x) and ir(f(x)) = f n (x) for all other 



symbols. By Theorem 4.6 it suffices to find a reduction ordering satisfying: 

x > x minusf r (s 7r (x), s 7T (y)) > minuses,?/) 

s T (x) > x quotf r (s 7r (a;),s 7r (y)) > quot|(x, s 7r (y)) 

quot^o,,-) > o„- quot|(s 7r (x),s 7r (y)) > minusl(x,?/) 

quot 7r (s 7r (x)) > s 7r (quot 7r (x)) 

These altered constraints can easily be satisfied with a lexicographic path ordering. 

4.5. The Subterm Criterion. An alternative to reduction pairs, which often suffices to 
eliminate some dependency pairs and is typically easy to check, is the subterm criterion. 

A function v that assigns to every n-ary dependency pair symbol /" one of its argument 
positions is said to be a projection function. We extend v to a function on terms by defining: 

v(ft( Sl ,...,S n )) = Si if !/(/«) =i 

Theorem 4.8. A set of dependency pairs V = V\ tt) Vi is chain-free if Vi is chain-free, 
and moreover there is a projection function v such that v{l) t> V{p) for all dependency pairs 
I ~> p € V\ and 17(1) = v(p) for all I ~> p £ "P2- 

This holds because for all Sj and ti in a dependency chain, v(si) and v(ti) are strict 



subterms, and therefore terminating under —>n U >; see also Theorem 8.2 

The subterm criterion is not sufficient to show termination of the quot example, but at 
least we can use it to eliminate some dependency pairs; choosing ^(minus^) = z/(quot") = 2: 

z7(minus"(s(x), s(y))) = s(y) > y = i7(minus"(a;, y)) 
i7(quot tt (s(x),s(y))) = s(y) = s(y) = ^(quot* (minus (x, y), s(y))) 
i7(quot"(s(x),s(y))) = s(y) > y = v(mimis$(x,y)) 

This shows that the TRS quot is non-terminating if and only if there is no dependency chain 
where every step uses the dependency pair quot"(s(x), s(y)) ~» quot* (minus (x, y), s(y)). 

4.6. The Dependency Graph. To determine whether a system has a dependency chain, 
it makes sense to ask what form such a chain would have. This question is studied with a 
dependency graph, a graph with as nodes 



the dependency pairs of 1Z and an edge 

from I ^> p to u v if pj u5 for C [minusf(s(a),s(y )) ^ minus^x, y) 



some substitutions 7, 5. See for example 

the dependency graph of the quo t-TRS. f , \ , n », ^ 

T r , - j j • quot B (s(x), s(y)) ~> minus B (x, y) 



If there is a dependency chain 
[(pi,Si,ti) I i G N], then there is an edge 



in the graph from each pi to pi + \. Since Q quot"(s(x), s(y)) ~> quot" (minus (x, y), s(y)) 
the graph is finite, a dependency chain 
corresponds to a cycle in the graph. 

By definition, if a set of dependency pairs is chain-free, then the same holds for any 
subset. Since a dependency graph might have exponentially many cycles, modern approaches 
typically consider only maximal cycles, also called strongly connected components (SCCs). 
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Theorem 4.9. 1Z is terminating iff every SCC of its dependency graph is chain-free. 



This result is extended to AFSs in Lemma 5.12 The dependency graph is not in general 



computable, which is why approximations are often used. An approximation of a dependency 
graph G is a graph with the same nodes as G, but which may have additional edges. 

The dependency graph of our running example quot has two cycles. In order to 
prove termination, it is sufficient to find a reduction pair such that minus"(s(x), s(y)) y 
minus" (x, y) and I y r for all rules, and a(nother) reduction pair with quot"(s(x), s(y j) >- 
quot" (minus (x, y), s(y)) and I y r for all rules. The fact that we can deal with groups of 
dependency pairs separately can make it significantly simpler to find reduction pairs. 

Extending Theorem |4.9[ we can iterate over a dependency graph approximation, and 
obtain the following algorithm (whose higher-order counterpart is presented in Section [9]): 

Theorem 4.10 Q14J). A TRS is terminating if and only if this can be demonstrated with 
the following algorithm: 

(1) calculate dependency pairs, find an approximation G for the dependency graph; 

(2) if G has no cycles, the TRS is terminating; otherwise, choose an SCC V 

(3) try finding a projection function u such that V(l) > v(p) for at least some I ~> p G V and 
17(1) > v(p) for the rest; if this succeeds, remove the strictly oriented pairs from G and 
continue with® 

(4) find a reduction pair (y, >-) such that I y r for all rules I —> r , and for all dependency 
pairs I ~> p G V either I y p or I y p; at least one pair must be oriented with y (**); 

(5) remove the dependency pairs which were oriented with y from G; continue with^ 
(**) To find (y, y) we may for instance use argument filterings. 



4.7. Usable Rules. We discuss one more optimisation. In the algorithm of Theorem 4.10 
we consider in every iteration for a strongly connected component V all rewrite rules. Instead, 
we can restrict attention to the rules that may be relevant for constructing a dependency 
chain using dependency pairs from V . To this end the concept of usable rules is defined. 

First we need some definitions. We denote by / g that there is a rewrite rule 
f(h, ■ ■ ■ , l n ) — > C[g(ri, . . . , r m )]. The reflexive-transitive closure of 3 M is denoted by □*<,. 
Overloading notation, we write s g if there is a symbol / in the term s such that / □*,, g. 
So if not s Zl* s g, then s cannot reduce to a term containing the symbol g. 

Definition 4.11. The set of usable rules of a term s, notation UR(s), consists of rules 
gil) — > r G 1Z, where s 3* s g. For a set of dependency pairs V, let UR(V) = Uz^pg-p UR(p). 

Using a reasoning originally due to Gramlich |12j . it is shown in [13] that if V is not 
chain-free, then there is a dependency chain over V where the reduction ti —>* Sj+i uses only 
the rules in UR(V) U {p(x, y) — > x, p(x, y) — > y} for some fresh symbol p (these two rules 



are usually considered harmless). Thus, in each iteration of the algorithm of Theorem 4.10 
we only have to prove I y r for the usable rules of V, rather than for all rules. 



5. The Basic Higher-Orde: 

In this section we define a basic dependency 
is terminating if it does not have a minimal 
the absence of (minimal) dependency chains 
case, we organise the dependency pairs in a 



r Dependency Pair Approach 

pair approach for AFSs. We show that an AFS 
dependency chain, and that for left-linear AFSs, 
characterises termination. As in the first-order 
graph, and explain how to use reduction pairs. 
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When extending the first-order dependency pair approach to AFSs, new issues arise: 

• collapsing rules: non-termination might also be caused by a higher-order variable being 
instantiated. For example, the right-hand side of the non-terminating rule f (g(-F), x) — > F-x 
doesn't even have defined symbols; 

• dangling variables: given a rule f (o) — > g(Ax. f (x)), the bound variable x should probably 
not become free in the corresponding dependency pair; 

• rules of functional type may lead to non-termination only because of their interaction with 
the (applicative) context they appear in; 

• typing issues: to be able to use the usual term orderings, both sides of a dependency 
pair (or the constraints generated from it) should have, usually, the same type modulo 
renamings of base types. 



Typing issues will be addressed in Section 5.5; for the other problems we have to take 



precautions already in the definition of dependency pairs. 

5.1. Dependency Pairs. In order to define dependency pairs, we first pre-process the 
rewrite rules and define candidate terms. The complete definition of dependency pairs may 
at first seem somewhat baroque; this is partly because we have to work around the issues 
of functional rules and dangling variables, and partly because of several optimisations we 
include to obtain an easier result system. 

Pre-processing Pre-processing the rewrite rules is done by completion: 

Definition 5.1 (Pre-processing Rules). An AFS is completed by adding for each rule 
of the form I — > Xx± . . . x n .r, with r not an abstraction, the following n rewrite rules: 
I ■ x\ — > Xx2 ■ ■ ■ x n . r, . . . , I ■ x\ ■ ■ ■ x n — > r. 

Note that completing an AFS has no effect on termination, since the added rules can be 
simulated by at most n + 1 steps using only the original rules. 



Example 5.2. The system twice from Example |3.1| is completed by adding the rewrite rule 
twice(F) • n F ■ {F ■ n). 

In the remainder of the paper, we assume that all AFSs are completed. 

To understand why completion is necessary, consider the AFS with a single rule f(o) — > 
Ax. f (x) ■ x. The term f (o) in this AFS is terminating, but there is an infinite reduction 
f(o) • o — > (Ax. f(x) • x) ■ o —>p f(o) • o — > . . .. Rules like this might complicate the analysis 
of dependency chains, because the important step does not happen at the top. The pre- 
processing makes sure that it could also be done with a topmost step: f (o) • o self-reduces 
with a single step using the new rule f(o) • x —> f(x) • x which was added by completion. 

It is worth noting that we did not add new rules for all functional rules, only for those 
where the right-hand side is an abstraction. A rule f(o) —> f(A) of functional type is left 
alone. This is an optimisation: it would be natural to add a rule f(o) • x — > f(A) • x, but this 
might give a dependency pair f (o) ■ x ^ which won't be needed. Instead of completing 
this rule, we will later add a special dependency pair for it. 

Candidate terms In the first-order definition of dependency pairs, we identify subterms 
that may give rise to an infinite reduction. Taking subterms in a system with binders is 
well-known to be problematic because bound variables may become free. One solution is to 
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substitute fresh constants in the place of a bound variable which would otherwise become 
free. In this way, F ■ c is a "subterm" of Ax. F ■ (F ■ x). This is the approach we take here. 

We assume for every type a a fresh symbol c CT : a. Sometimes the sub-script indicating 
the type is omitted. The set of all those symbols is denoted by C. The symbols c CT are used 
to replace bound variables which become free by taking a subterm. 

Definition 5.3 (Candidate Terms). Let r be a term in an AFS. A subterm t of r is a 
candidate term of r if either t = f(t±, . . . , t m ) • t m+ i ■ ■ ■ t n with / a defined symbol and 
n > m > 0, or t = x ■ t\ ■ ■ ■ t n with x free in r and n > 0. 

If t is a candidate term of r, and {xi : a±, . . . ,x n : a n } is the set of variables which 
occur bound in r but free in t, then t[x\ := c ai , . . . , x n := c an ] is a closed candidate term of 
r. We denote the set of closed candidate terms of r by Cand(r). 

In the AFS twice we have C and{F ■ {F ■ m)) = {F-(F-m), F-m} and Can<i(s(twice(Ax. \(x)) ■ 
n)) = {twice(Ax. \{x)) -n, twice(Ax. I(x)), l(c nat )}. If f is a defined symbol, then the candidate 
terms of f(a) • b • c • d are f(a), f(a) • b, f(a) • b • c and f(a) • b • c • d. Note that for example 
x • y is not a candidate term of g(Xx. x • y) because x occurs only bound. 

Dependency Pairs As in the first-order case, the definition of dependency pair uses 
marked function symbols. Let = JU {/" : a \ f : a G V}, so T extended with for every 
defined symbol / a marked version f with the same type declaration. We denote by T\ 
the union of and C. The marked counterpart of a term s, notation s", is /"(si, . . . , s n ) if 
s = f(si, . . . , s n ) with / in V, and just s otherwise. For example, (twice(F))" = twice^F) 
and (twice(F) • m)" = twice(F) • m. Applications are not marked. 

Definition 5.4 (Dependency Pair). The set of dependency pairs of a rewrite rule I — > r, 
notation DP(Z — > r), consists of: 

• all pairs r ^ p* with p G Cand(r) such that p is no strict subterm of I; 

• if / has a functional type o\ =^ . . . =^> a n =^ i (n> 1) and head(r) is either a variable or a 
term f(s) with JeP: all pairs I ■ y\ ■ ■ ■ y& ~> r ■ y\ ■ ■ ■ yk with k G {1, . . . , n} and all yi 
are fresh variables. 

We use DP(7£) (or just DP if 1Z is clear from context) for the set of all dependency pairs of 
rewrite rules of an AFS 1Z. 

Example 5.5. The set of dependency pairs of the AFS twice consists of: 

l tt (s(n)) ^ twice(Ax. \(x)) -n twice tt (F) ^ F ■ (F ■ c nat ) 

l*(s(n)) ~» twice tt (Ax. I(x)) twice tt (F) ^ F • c nat 

l«(s(n)) ~» l»(cnat) twice(F) ■ m ~> F • (F • m) 

twice(F) ■ m ~> F-m 

The last two dependency pairs originate from the rule added by completion. 

The second form of dependency pair deals with functional rules whose right-hand side 
is not an abstraction. To illustrate why they are necessary, consider the system with 
function symbols A : [o] =>- 0=^-0 and B : [0=^0] =^0, and one rewrite rule: A(B(F)) — > F. 
This system has no dependency pairs of the first kind, but does admit a two-step loop: 
s := A(B(Ax. A(x) • x)) ■ B(Ax. A(x) • x) ->■ (Ax. A(x) • x) • B(Ax. A(x) • x) s. The rule does 
have a dependency pair of the second form, A(B(F)) • x ~» F • x. 
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Comparing our approach to static dependency pairs as denned in [26], the two main 
differences are that we avoid bound variables becoming free, and that we include collapsing 
dependency pairs, where the right-hand side is headed by a variable. 

5.2. Dependency Chains. We can now investigate termination using dependency chains: 

Definition 5.6. A dependency chain is an infinite sequence [(pi,Si,ti) \ i G N] such that 
for all i: 

(1) pi G DP U {beta}; 

(2) if pi = li pi G DP then there exists a substitution 7 such that Si = ^7 and ti = pij; 

(3) if pi = beta then Sj = (Ax. u) ■ v ■ w% ■ ■ ■ and either 

(a) k > and ti = u[x := v] ■ w\ ■ ■ ■ Wk, or 

(b) k = and there exists a term w such that u > w and x G FV(w) and ti = w$[x := v], 
but w ^ x; 

(4) Si+l- 

A step — >-j n is obtained by rewriting some Ui inside a term of the form f(u\, . . . ,u n ) ■ 
u n +i ■ ■ ■ u m . If ti = Sj+i, then also U — >* n Sj+i, regardless of whether ti has this form. A 
dependency chain is minimal if the strict subterms of each ti are terminating under 

This definition corresponds to the first-order definition, except that a case for /3-reduction 
is used, and that we explicitly require that tj — >* n Sj-fi: this is necessary because U may be 
an application rather than a functional term, and consequently may not be marked. 

Theorem 5.7. IflZ is non-terminating, there is a minimal dependency chain over DP (TZ). 

Proof. Given any non-terminating term, let g_i be a minimal-sized subterm that is still 
non-terminating (q~i is MNT, or Minimal N on- Terminating) . We make the observations: 

(i) If an MNT term is reduced at a non-top position, the result is either also MNT, or 
terminating. This holds because, if q = C[s] — C[t] because s —tn t, and t is 
non-terminating, then so is s, contradicting minimality of q unless C = O a . 

(ii) If u — >* n v, then 1$ — >* n vK This holds by the nature of an internal step. 

For any i G N U { — 1}, let qi be a MNT term, and U = qf. Then qi is not an abstraction, 
as abstractions can only be reduced by reducing their immediate subterm, contradicting 
minimality. For the same reason qi cannot have the form x ■ u\ ■ ■ ■ u n with x a variable, or 
f(u\, . . . , u n ) ■ u n +i • • • u m with / a constructor symbol. What remains are the forms: 

(A) qi = (Ax. u) ■ v ■ wi ■ ■ ■ w n ; 

(B) qi = f(vt, ...,v n )- v n+1 ■■■v m with / G V. 

We consider an infinite reduction starting in qi. By minimality of qi eventually a headmost 
step must be taken. In case (A) this must be a /3-step because the left-hand sides of rules 
have the form f(h) • h\ therefore, the reduction has the form qi — ^ (Ax. u') - v' -w^ • ■ ■ w' n 
u'[x := v'] ■ w[ ■ ■ - w' n —tfc . . . Since also u[x := v] ■ w\ ■ ■ ■ w n — >\ u'[x := v'] ■ ■ ■ ■ w' n the 
immediate beta-reduct of qi is non-terminating as well. There are two sub-cases: 
• If n > 0, this reduct is MNT by (i); in this case choose qi + \ := u[x := v] • w\ ■ ■ ■ w n and 
let pi+i, Si+i,tj+i := beta, m, Ui + \. Note that s| +1 = Sj+i and t\ +1 = ij+i, and that case 



3a of the definition of a dependency chain is satisfied. 
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• If n = 0, let w be a minimal-sized subterm of u where w[x := v] is still non-terminating. 
By minimality of qi both w and v are terminating, so FV(w) contains x, but not w = x. 
Since w is not a variable, (w[x := v])* = w^[x := v]. By minimality of w, also w[x := v] is 
MNT (its direct subterms have the form w'[x := v] for a subterm w' of u>). Case 3b is 
satisfied with Uj+i := w[x := u] and pi+x,Si+i,ti+i := beta, Uj, u\ +1 . 

Note that in both sub-cases, case [4] is also satisfied, since U = Si + \. 

In case (B), qi = f(v\, . . . , v n ) ■ v n+ \ ■ ■ ■ v m , we can always find a rule I — > r and term 

q'i = h • v 'j+i ' " " "In sucn that % — >-* n q[, and r7 • <y'- +1 • • • v' m is still non-terminating. Choose 



Sj+i := g i , requirement 4 from Definition 5.6 is satisfied by (ii). Since the rules were 



completed, we can assume that either m = j or r is not an abstraction: if r = Xx. r' and 
m > j then ■ v'j +1 ■ ■ ■ v' m is a /3-redex, and (like above) may be reduced immediately 
without losing termination; the same result would have been obtained with the rule I ■ x — > r' . 

If m > j, then by (i) ■ v'j +1 ■ ■ ■ v' m is MNT. Consequently, head(r~/) cannot be a 
variable or a functional term g(w) with g a constructor symbol: either rj is headed by 
an abstraction, or by a functional term with root symbol in T>. Since r itself is not an 
abstraction, its head must be a variable or a functional term with defined root symbol. Either 
way, pi + i := / • Xj + \ ■ ■ ■ x m ~> r • Xj + \ ■ ■ ■ x m is a dependency pair. Let qi + \ := ■ v'j +1 ■ ■ ■ v! 



in • 



and ti + \ := qi+\ (which equals q\ +1 as this is an application). Requirement [2] is satisfied. 

Finally, if m = j, then q[ = Z7 and is non-terminating. Let p be the smallest subterm 
of r such that p[x := 0)7 is non-terminating, where {x} = FV{p) \ FV(r). Then p is not 
a variable, for each j(x) is a subterm of £7, and therefore terminating (and the c CT do not 
reduce). Thus, the immediate subterms of p[x := c]7 all have the form p'[x := c]7 with p>p', 
and are therefore terminating by minimality of p: p[x := c]7 is MNT. As observed before, 
this can only be the case if this term is headed by an abstraction or by a functional term with 
a defined root symbol. And that can only be the case if p is either headed by a functional 
term with defined root symbol, or is an application headed by a variable which is free in r (as 
r has no subterms (Xx. u) ■ v). Thus, p[x := c] is a closed candidate term of r. As p[x := c]7 
is non-terminating, it is not a strict subterm of the MNT term Z7, so pj+i := ^ p[x := c]" 
is a dependency pair. Choose qi + \ := p[x := 0)7 and tj+i := = p[x := c]^7 (since 
p[x := c] is not a variable). We see that in this case, too, requirement [2] is satisfied. □ 

Example 5.8. As we will see, twice does not admit a dependency chain. As an example of 
a system which does admit one, consider the AFS with the following three rules: 

f(o) -)• g(Aa?.f(x),a) g(F, b) F • o a^b 

This system has four dependency pairs: 

f«(o)->g»(Ax.f(x),a) f a (o) ~> f s (c nat ) f»(o)->a tt g tt (F,b)->F-o 

The rules admit an infinite reduction: f(o) — > g(Xx. f (x), a) — )• g(Ax. f (x), b) — >• (Xx.f(x)) ■ 



o — >p f (o) — > . . .; following the steps in the proof of Theorem 5.7 (starting with f (o)) we 
obtain the following dependency chain: 

( f«(o)^g»(Ax.f(x),a) , f«(o) , g»(Ax.f(x),a) ), 

( g»(F,b)^F-o , g*{Xx.f(x),b) , (Ax.f(x),a)-o ), 

( beta , (Ax. f (x), a) • o , f tt (o) ), 

( f»(o)~>g»(Ax.f(x),a) , f«(o) , g»(Ax.f(x),a) ), 
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Note that between the first and second step, a — >i n step is done to reduce a to b. Also note 



that in the third triple we use case 3b from Definition 5.6, with w = f{x). 



The converse of Theorem 5.7 does not hold. Consider for instance the AFS with symbols 
A : [nat x nat] =^ nat and B : [nat=^- nat=^ nat] =4> nat, and a single rule: k(x,x) — > B(Xyz. A(y, z)). 
This (terminating!) AFS has a dependency pair A^(x,x) ~> A»( c nati c nat)> which gives a 
dependency chain A^(c nat , c na t) A^(c nat , c nat ) ~> . . . 

We could try solving this problem by slightly altering the definition of closed candidate 
terms: instead of substituting a variable x : a by a symbol c CT , we could have replaced it 
with a symbol c^, substituting all bound variables with different symbols. This choice was 
made in for example the first definition of dependency pairs for HRSs [35] . But even with 



this change, Theorem 5.7 does not give an equivalence. Consider for instance the AFS with 
the following rules: 

f(x,y,s(z)) -> g(h(x,y),\u.f(u,x,z)) 
h(x,x) — > f(x, s(x), s(s(x))) 
This system has three dependency pairs: 

f*(x,y,s(z)) ~> h s (x,y) 
^(x,y,s(z)) ~> f$(c u ,x,z) 

h*(x, x) ~> f"(x, s(x), s(s(x))) 

We get the following dependency chain: f'(c u , s(c u ), s(s(c u ))) ~> f tt (c u , c u , s(c u )) ^ h s (c u ,c u ) 
~> f"(c u , s(c u ), s(s(c u ))) ~» . . . However, the AFS is terminating, intuitively because the 
bound variable destroys matching possibilities with the non-left-linear rule. 

For this reason, we have chosen to use the more elegant method with symbols c CT instead 
of the slightly more powerful, but also a fair bit more cumbersome, c x . The latter style is 
less pleasant because of a-conversion: for example, Cand(f (Ax. g(x))) should contain g(c y ) 
for all variables y. Thus, to preserve correctness of definitions and proofs, we would have to 
jump through a few hoops. However, all results in this paper also go through with such a 
definition; this was for instance explored in the shorter version of this paper [24] . 

The crucial point of both examples above is the combination of bound variables and non- 
left-linear rules. However, for left-linear AFSs, no such counterexample exists. Intuitively, 
this holds because replacing variables by a symbol c CT that does not occur in any left-hand 
side does not affect applicability of any rule. Thus, a dependency chain effectively produces 
an infinite reduction \si\ —>n • > \ti\ — Kj^ |sj+i| (where \u\ replaces any p in a term u by its 
unmarked counterpart), and this implies the existence of an infinite —>n reduction. 

Theorem 5.9. A left-linear AFS TZ is terminating if and only if it does not admit a 
(minimal) dependency chain. 



Proof. Theorem 5.7 gives one direction. For the other direction, assume a left-linear AFS 
TZ and suppose we have an infinite dependency chain (minimal or not). We construct an 
infinite —>n •> sequence, following roughly the intuition above. We note: 

(1) If I is a linear term not containing any symbols c a , and 7 is a substitution whose domain 
contains only variables in I, and if Z7 = s[x := c\ for some term s and set of variables 
{x}, then there is a substitution 5 such that 15 = s and 7 = 5[x := c\. 

(2) If s[x := c] — >ti t, then there exists some tl such that s —>n t' and t'[x := c] = t. 

(3) If s[x := c] = C[t], then there are C and t' such that s = C'[t'\ and t'[x := c] = t. 



DYNAMIC HIGHER-ORDER DEPENDENCY PAIRS 



15 



([I]) states that, if a linear term I (typically the left-hand side of a rule) matches a term s 
with some c-symbols in it, it also matches s with those symbols replaced by variables. 

This holds by induction on I, assuming linearity over dom(7): the cases where I is a 
variable are straightforward (if I G dom(7) take S = [I := s], otherwise let 6 := 0), if I is an 
abstraction Ax. V the induction hypothesis suffices (x cannot occur in domain or range of 5, 
for then it would also hold for 7), and if I is an application or functional term we use the 
linearity. For example the functional case, if I = f(Ji, . . . ,l n ), then let ji be the restriction of 
7 to FV(Ji) for 1 < i < n; by the induction hypothesis we find suitable Si, and by linearity 
of I each of those l{ has different variables, so 5 := 5i U . . . U 5 n is well-defined. 

([2]) states that, if a term with some variables replaced by c-symbols reduces, then the 
original term reduces in a similar way. This holds by induction on the size of s. When the 
reduction is done in a subterm, the statement follows easily with the induction hypothesis 
(immediate subterms of s[x := c] have the form s'[x := c] with s > s' , so the induction 
hypothesis is applicable). In the base case, a /3-step is easy, and if, for some rule I — > r and 
substitution 7, the term s[x := c] = Z7, then by left-linearity of H we may use @: there is a 
substitution 5 such that s = 15 — >n r5 =: t'; certainly rS[x := c] = = t as required. 

([3]) follows by induction on the size of C: if C is the empty context take t' := s, 
otherwise use the induction hypothesis; for instance if C[] = f(u%, . . . , -DjfJ, . . . , u n ), then 
s = f(si, . . . , Sj, . . . , s n ) (with each Sj[x := c] = Uj), and by the induction hypothesis on Sj 
there are D[, t' such that C := /(si, . . . , D^, . . . , s n ) and t' satisfy the requirement. 

Now suppose there is a dependency chain [(pi,Si,ti) | i G N], and define Sq := |so| (that is, 
so with all marks removed). For all i € N, suppose s'Ja?o := c, . . . , x£-\ := c] = |sj|. Whether 
Pi is beta or a dependency pair, |sj| — ^ Ci[ui] for some term Uj and context Cj, such that 
\ti\ = Ui[x{ := c] for some variables ifj. By ([2]), ([3]) also — >n C'^u'^ and «^[xo := c, . . . ,Xi := 
c] = |t»|. By ([2| we can find s^ +1 such that u { — >\ s' i+l and s^ +1 [xo := c, . . . , x~i := c] = |sj+i|. 
Thus, s' is non-terminating: s' — >^ CqIs^] — >^ C [C[[s' 2 ]] —5-^ ... □ 



5.3. The Dependency Graph. As in the first-order case, we use a dependency graph to 
organise the dependency pairs. The notions are very similar to the first-order definitions. 

The dependency graph of an AFS 1Z is a graph with the dependency pairs of 1Z as nodes, 
and an edge from node I ~> p to node /' ~» p' if either head(p) is a variable, or there are 



substitutions 7 and 5 such that ^7 



Z'<5. 



Example 5.10. The dependency graph of the AFS twice: 



O 



twice(F) ■ F ■ (F ■ m) 



l"(s(n)) ^ twice(Arc. I(x)) • n 



n twice(F) • m F ■ m 




twice»(^)^F-(F-c nat ) 



V 



l tt (s(n)) ^ twice fl (Ax. I(x)) 



twice" (F) ~» F • Cnat 

o 



A cyc/e is a set C of dependency pairs such that between every two pairs p, it £ C there 
is a non-empty path in the graph using only nodes in C. A cycle that is not contained in 
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any other cycle is called a strongly connected component (SCC). To prove termination we 
must show that cycles in a dependency graph are "chain- free" (see Theorem 5.16). The 
requirement to add an edge from any node of the form I ~v x ■ r± ■ ■ ■ r n (with x a variable) to 
all other nodes is necessary by clause 3b in Definition 5.6 a dependency chain could have a 
dependency pair of the form I ~» x- r followed by beta, and then any other dependency pair. 
Hence a rule with leading free variables in the right-hand side gives rise to many cycles. 

A set of dependency pairs V is called chain-free if there is no minimal dependency chain 
using only dependency pairs in V U {beta}. 



Lemma 5.11. is chain-free. 

Proof. Given a dependency chain with all pi = beta, each 
Ci, contradicting termination of the simply- typed A-calculus. 



a 



for some context 
□ 



Because the dependency graph cannot be computed in general, it is common to use 
approximations of the dependency graph, which have the same nodes but possibly more edges. 
A brute method to find an approximation is to have an edge between I ~> p and I' p' if 
either the head of p is a variable, or if p and I' both have the form f(s±, . . . , s n ) ■ s n +i ■ ■ ■ s m 
for the same function symbol /. It is interesting to study more sophisticated methods to 
find approximations, but this is left for future work. 

As stated in Section |3j we assume a finite set of rules, which leads to a finite set of 
dependency pairs. In Section 10, 2| we will say a few words on extending the technique to 
systems with infinitely many rules (without having to deal with an infinite graph). 

Lemma 5.12. Let G be an approximation of the dependency graph of an AFS 1Z. Suppose 
that every SCC in G is chain-free. Then 1Z is terminating. 

Proof. Since DP is finite, any (minimal) dependency chain [(pj,Sj,£j) | i G N] has at least 
one dependency pair pi which occurs infinitely often. Note that if n < m then there is a 
path in G from p n to p m (if p n , p m / beta). Therefore, there is a path in G from pi to itself, 
and hence pi is on a cycle. Let C be the SCC containing pi. Then all pj with j > i and 
Pj / beta are in C: from each such pj there is a path to pi and back. But then, {pj \ j > i} 
is a minimal dependency chain in C, so C is not chain- free, contradicting the assumption! 
Thus, there is no dependency chain, and therefore by Theorem 5.7, 1Z is terminating. O 



Example 5.13. The dependency graph (approximation) of twice from Example 5.10 has 



only one SCC: 

l«(s(n)) 
l«(s(n)) 
twice(F) • m 



twice(Ax. I(x)) • n twice^(F) 
twice a (Ax. I(x)) twice tt (F) 
F ■ (F ■ m) twice(F) • m 




Therefore twice is terminating if this set, which we shall call C tw j ce , is chain- free. 



5.4. Reduction Triples. The challenge, then, is to prove that given sets of dependency 
pairs are chain-free. We use the following definition: 

Definition 5.14. A reduction triple consists of a quasi-ordering y, a sub-relation of y, 
and a well-founded ordering y, all defined on terms built over J 7 !, such that: 

(1) y and >- are compatible: either y • y ^ y on: y • y ^ y', 

(2) y, y_i and y are all stable (closed under substitution); 
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(3) is monotonia: (if s y% t and s,t share a type, then C[s] y± C[t] for all C[]); 

(4) contains beta (always (\x. s) • t >zi s[x := t]). 

A reduction pair is a pair (y, y) such that (y, y, y) is a reduction triple; this corresponds 
to the first-order notion of a reduction pair. The reduction triple is a generalisation of this 
notion, where y itself is not required to be monotonic; we will need a non-monotonic y 



in Section 5.5 to compare terms with different types. This notion of a reduction triple is 
similar to the one which appears in [15] . 

To deal with subterm reduction in dependency chains, an additional definition is needed. 

Definition 5.15 (Limited Subterm Property), y has the limited subterm property if the 
following requirement is satisfied: for all variables x and terms s, t, u such that s>uO>x, 
there is a substitution 7 such that (Xx. s) • t y v?[x := t]j. 

Intuitively, the substitution 7 can be used to replace free variables in u which are bound 
in s by the corresponding constants Co-. However, we will also use a more liberal replacement 
of those variables, hence the general 7. 

The following theorem shows how reduction triples are used with dependency pairs. 

Theorem 5.16. A set V = V\ W V2 of dependency pairs is chain-free ifVi is chain-free, 
and there is a reduction triple (y, y_i, y) such that: 

• I y p for all I ~>- p £ V\, 

• I 'y P for all I ~> p G Vi, 

• I ^1 r for all I — >• r G 1Z, 

• either V is non-collapsing or y has the limited subterm property. 

Here, a set V of dependency pairs is called non- collapsing if all elements of V are non- 
collapsing. Symmetrically, V is collapsing if it contains at least one collapsing pair — > x ■ p. 

Proof. Towards a contradiction, suppose there is such a reduction triple (V, ti, >-), but V 
admits a minimal dependency chain; since Vi is chain- free, infinitely many pi are in V\. 

If V is non-collapsing, then the chain may start with some beta steps, but once some 
Pi G DP, all pj with j > i must also be in DP, because the head of each ij is a functional 
term, rather than an abstraction. Thus, for each j either Sj y tj y s,-+i, or (if pj £ Vi) even 
Sj y tj y Sj + \, contradicting well-foundedness of y (the latter happens infinitely often). 

Alternatively, suppose V is collapsing, and y has the limited subterm property. Let 
[(pi, Si,ti) I i > j] be a dependency chain over V; if pj G V\ then Sj y tj y Sj+i, if Pj G Vi 
then Sj y tj y Sj+i and if pj = beta then (by the limited subterm property) there is a 
substitution 8 such that Sj y tj5 y Sj + \5. Since [(pi, Si5, t L 5) \ i > j + 1] is also a dependency 
chain we can continue this reasoning recursively. We obtain a decreasing y sequence with 
infinitely many y steps, which contradicts well-foundedness of y. D 



Theorem 5.16 can be used to prove that every SCC in the dependency graph approxim- 



ation of an AFS is chain- free; termination follows with Lemma |5.12| In Section [9] we will 



give an algorithm similar to the algorithm in Theorem 4.10 

Example 5.17. Termination of twice is proved if there is a reduction triple (V, y_i, y) with 
the limited subterm property, such that I y_\ r for all rules, and I y p for every dependency 



pair in C tw ice from Example 5.13| (choosing V2 = 0, which is chain- free). 



For left-linear AFSs, where the existence of a minimal dependency chain characterises 



termination by Theorem 5.7, a terminating AFS always has a suitable reduction pair. 
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Theorem 5.18. A left-linear AFS is terminating if and only if there is a reduction triple 
(y, ^l) y) such that I y p for every I ~» p £ DP, and I y_i r for every I — >• r € 1Z, and y has 
the limited subterm property. 



Proof. By Lemma 5.12 and Theorem 5.16, termination of 1Z follows if such a reduction triple 



exists. For the other direction, let s y t if \s\ — >^ \t\, and let s y t if \s\ ■ > ) + \t\, 

where > is the (reflexive) subterm relation where bound variables which become free are 
replaced with symbols c CT , and |u| removes marks from u. It is evident that (y,y, y) is 
a reduction triple, that I y p for all dependency pairs I ~> p and I y r for all rules I — > r. 
Moreover, y has the limited subterm property with 7 the substitution [y := c\. □ 



5.5. Type Changing. The situation so far is not completely satisfactory, because both y 
and y may have to compare terms of different types. Consider for example the dependency 
pair twice^(F) F • c na t? where the left-hand side has a functional type and the right-hand 
side does not. Moreover, the comparison in the definition of limited subterm property may 
concern terms of different types. This is problematic because term orderings do not usually 
relate terms of arbitrary different types; neither any version of the higher-order path ordering 
[T9l 0] nor monotonic algebras [32] are equipped to do this. 

A solution is to manipulate the ordering requirements. Let (V, y) be a reduction pair 
(so a pair such that (y, y, y) is a reduction triple). Define >, >i and > as follows: 

• s > t if there are fresh variables x\, . . . ,x n and terms ui, . . . , u m such that s ■ x\ ■ ■ ■ x n y 
t ■ u\- ■ ■ u m and both sides have some base type; 

• s > t if there are fresh variables x\ , . . . , x n and terms u\ , . . . , u m such that s ■ x\ ■ ■ ■ x n Rt- 
u\ ■ ■ ■ u m and both sides have some base type; here R is the union of y, y ■ y and y ■ y; 

• s >i t if s y t and s and t have the same type. 

Lemma 5.19. (>, >i, >) as generated from a reduction pair (y, y) is a reduction triple. 

Proof. We make the following observations: 

(1) if s >i t then by monotonicity sx y tx; 

(2) if s > t then for any u there are v such that s ■ u y t ■ v (by stability of y); 

(3) if s > t then for any u there are v such that either s-uyt-vors-uy ■ y t ■ v or 
s ■ u y ■ y t ■ v (by stability of both y and y). 

Each of the required properties on >, >i, and > now follows easily from the properties on 
y and y. For example transitivity of >: if s > t > u, then there are terms v such that 
s-x y t-v, and by Q there are terms w such that t ■ v y u ■ w; by transitivity of y, therefore, 
s ■ x y u ■ w, so s > u. Well-foundedness of > follows from ^ and well-foundedness of y. For 
stability, note that if s > t and 7 is a substitution, then for fresh variables x (which do not 
occur in domain or range of 7) also s ■ x y t ■ v, so (57) ■ x = (s ■ a?) 7 y (t ■ v)^ = (tj) ■ (^7); 
stability of > is similar. >i is included in > by Q, and contains beta because y does. For 
compatibility, and for transitivity of >, we use a case distinction on which form of > is used, 
and transitivity of both y and y, as well as compatibility between the two. □ 
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The relations > and > are not necessarily computable, but they do not need to be: we 
will only use specific instances. To prove some set of dependency pairs V chain-free, we 
can choose for every pair / ~> p G V a corresponding base-type pair I ~v p, and prove either 
I y p or I >- p. For example, we could assign I := I ■ x% ■ ■ ■ x n and p := p ■ c CTl • • ■ c CTm . This is 
the choice we will use in examples in this paper. Other choices for p are also possible. 

We assume a systematic way of choosing l^>p given I ~> p. 

To make sure that > has the limited subterm property, we consider a base-type version 
of subterm reduction, which has a strong relation with /3-reduction. 

Definition 5.20. > ! is the relation on base-type terms (and !> ! its reflexive closure) generated 
by the following clauses: 

• (Ax. s) ■ to ■ ■ ■ t n [> ! u if s[x := to] ■ t\ ■ ■ ■ t n > ! u; 

• f(s\, . . . , s m ) ■ t\ ■ ■ ■ t n >' u if Si ■ c t> ! u for some i; 

• s ■ t\ ■ ■ ■ t n >' u if ti ■ c!> ! u for some i (s may have any form). 



Here, s ■ c is a term s applied to constants c a of the right types. We say (y, y) respects >' if 



> ! is contained in (y U y)*. Note that, since y contains beta, the first clause is not likely 
to give problems. >■ is interesting because if s > t and s has base type, then there are terms 
til j . . . , u n and a substitution 7 on domain FV(t) \ FV(s) such that s >' tj ■ u\ ■ ■ ■ u n (this 
is easy to see with induction on the size of s). Consequently, > has the limited subterm 
property if (y, >-) respects > ! and f(x) y ft(x) for all / G T> (the marking property). 

Using Theorem |5.16 and the reduction triple generated from a reduction pair, we obtain: 



Theorem 5.21. A set of dependency pairs V = V\ WP2 * s chain-free ifVi is chain-free and 
there is a reduction pair (y,y) such that: 

(1) lyp for alll^p€ V\; 

(2) I h p for alll^ype V 2 ; 

(3) I y r for all I ^ re K; 

(4) ifV is collapsing, then (y, >-) respects and f(x) y p(x) for all f G V. 

Note that the theorem does not use the generated (and possibly not computable) triple 
directly; we prove I y p or I y p for a specific choice of I and p. The generated triple is 



merely used in the reasoning that justifies Theorem 5.21 



Example 5.22. To prOVG tllctt Ctvvice 

is chain- free it suffices to find a reduction pair (y, >-) 
such that I y r for all rules, (y, y) respects >■ and satisfies the marking property, and: 

l"(s(n)) y twice(Ax. \(x)) ■ n twice* 1 (F) ■ x y F ■ (F ■ c nat ) 
l a (s(n)) >- twice 8 (Ax. I (x)) • c nat twice 8 (F) • x y F • c nat 
twice(F) ■ m y F • (F • m) twice(i ? ) • m y F ■ m 

This completes the basis of dynamic dependency pairs for AFSs. 



At this point, we might ask: what have we gained? Is it easier to use Theorem 5.21 
than to use a conventional approach like CPO [4J? Can we even find a reduction pair which 
respects >•? And if so, couldn't we use the same reduction pair without dependency pairs? 

The answer to these questions will be explored in the coming sections. First (Section [6]), 
we will consider an extension limited to fully extended, left-linear AFSs. With this restriction, 
we can weaken the limited subterm property, and obtain a variation of usable rules. Next, in 
Section [7j we will study two ways to find a suitable reduction pair: using interpretations in 
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a weakly monotonia algebra, and argument functions, a generalisation of argument filterings. 
Finally, in Section [8] we will see additional ways to prove chain- freeness of a set V if V is 
non-collapsing. All results are combined in the algorithm of Section [9j 

6. Dependency Pairs for Local AFSs 

In this section we consider local AFSs, and define formative rules for local AFSs. We add 
tags to symbols below a X, and prove that we only need the limited subterm property for 
tagged symbols. We use this to weaken the requirements on a reduction pair. 



The limited subterm property is weaker than the requirements used in Theorem 5.21 
subterm reduction only has to be done following /3-reduction. That is, we only need it for 
terms which occur below a A-abstraction, when a bound variable is substituted. 

To exploit this property, we will pay special attention to local AFSs. In a local AFS we 
can (mostly) avoid reducing terms below an abstraction. Knowing this, the limited subterm 
property only requires that f(s±, . . . , s n ) ■ s n+ ± ■ ■ ■ s m >z Si ■ c for symbols / which cannot, at 
that time, be reduced anyway. This makes it possible to use for instance argument filterings, 



as we will see in this section and Section 7.2 As a bonus, locality also allows us to define 



formative rules, a variation of usable rules. These are discussed in Section 6.4 



6.1. Intuition. The idea to tag symbols and rules in order to weaken the limited subterm 
property originates in the notion of weak reductions, defined in [6] (following a definition 
from Howard in 1968). A weak reduction in the A-calculus does not use steps between a 
A-abstraction and its binder. This notion generalises to AFSs in the obvious way. 

Consider AFSs where the left-hand sides of all rules are linear (so no free variables occur 
more than once), and free of abstractions (so the A symbol does not occur in them). This 
limitation is not as strong as it might seem at first; the /3-reduction "rule" is not included in 
this. As it turns out, we can prove the following statement: 

Claim: in a left-linear, and left-abstraction-free AFS, if there is a minimal dependency 
chain, then there is one where the reduction U — >^ Sj+i always uses only weak steps. 

To see why this matters, let us consider a colouring of the function symbols. In a given 
term s, make all symbol occurrences either red or green: red if the symbol occurs between 
an abstraction and its binder, green otherwise. So if s = C[f{t\, . . . , t n )], make the / red if 
some ti contains freely a variable which is bound in s, green if not. We say s is well-coloured 
if it uses this colouring. Colour the rules in the same way; by the restrictions, the left-hand 
sides are entirely green, while the right-hand sides may contain red symbols. 

Now consider a weak reduction step on a well-coloured term. If the term is reduced by 
a coloured rule, then the result is also well-coloured. If the term is reduced with a /3-step, 
then the result may have some red symbols outside an abstraction; however, it can become 
well-coloured again by painting these red symbols green. We never have to paint green 
symbols red. Inventing notation, we can summarise this as follows: 

Claim: if s ^ weak t, then colour(s) -^n colour • ^* m ake.green colour(t). 

Combining the two claims, we can colour dependency chains. In the beta-with-subterm 



step (3b), which led to the need for the limited subterm property, we take a term which 
was originally below an abstraction, reduce it to a subterm which still contains the bound 
variable, and substitute it. Importantly, the subterm clause u > v can be derived with steps 
Ax. s D> s, s± ■ S2 > Si and f(s±, . . . , s n ) > Sj, where the f is always a red symbol. 
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Considering the red and green symbols as different symbols altogether (related only by 
the make-green rules) we thus see that it will not give problems to use an argument filtering, 
provided we use it only for the green symbols! 

This summarises the ideas which we shall use to simplify the limited subterm property. Since 
colours do not work well in papers, we will use tags: a red symbol / corresponds with a 
symbol /~, and a green symbol remains unchanged. Moreover, if we focus on the colours, 
and forget about the weak reductions, it turns out that we do not need to require that the 
left-hand sides of rules contain no A-abstractions at all: it suffices if the rules are local. 

6.2. Local AFSs. Both to weaken the limited subterm property, and for formative rules, 
we shall restrict attention to so-called local AFSs where, intuitively, matching is purely local. 
This means that to apply a rule we do not have to check whether two subterms are equal, or 
whether a symbol occurs in a subterm. Locality combines the restrictions that the system is 
left-linear and fully extended. A left-linear, left-abstraction-free AFS is always local. 

The locality restriction appears in the literature both for HRSs [61\ \5\ , where a pattern 
is called local if it is fully extended and linear, and for combinatory reduction systems 
(CRSs) in [25]; the latter definition is slightly different but has a similar underlying intuition. 
The definition for AFSs here follows |31| [5], although the definition of full-extendedness is 
technically (but not conceptually) different from the one for HRSs. We will use locality to 
be able to (mostly) postpone reductions below an abstraction. In the explanations below, 
we will argue that left-linearity and full-extendedness are both necessary to do this. 

Left-linearity When a system is not left-linear, a reduction deep inside a term may be 
needed to create a topmost redex. For instance, consider the non-left-linear AFS with rules 
{f (x, x) — > b, a — > b}. In the reduction f(Ax. a, Ax. b) — > f(Xx. b, Ax. b) — > b a reduction below 
an abstraction is necessary to create the syntactic equality required for the f-rule. Thus, 
this step cannot be postponed. 

Full-Extendedness We say a term I is fully extended if free variables in / do not occur 
below an abstraction; a rule I — > r is called fully extended if / is. 

For the intuition of this restriction, consider a rule f (Ax. y) — > y. This rule does not 
match a term f(Ax.s(x)), since y cannot be instantiated with s(x), as x is bound. Nor does 
f (Ax. F ■ x) match this term, since s(x) does not instantiate the application F ■ x. Whenever 
the left-hand side of a rule contains a free variable below an abstraction, this variable matches 
only subterms which do not contain the abstraction-variable. Therefore, such a rule could 
require a reduction deep inside a term to create a topmost redex. For example, in an AFS 
with rules {f(Ax.y) — > y, g(x,y) — > a}, we cannot postpone the first step in the reduction 
f(Ax. h(Ay. g(x, y))) — > f (Ax. h(Ay. a)) — > h(Ay. a), as it is needed to create the second redex. 

This notion of fully extended mostly corresponds with the definition for HRSs; there, 
however, a rule f(Ax. F ■ x) — > r does match f(Ax. s(x)), so such rules are also accepted. 

Definition 6.1. An AFS (F,TZ) is local if all I — > r E TZ are left-linear and fully extended. 

Example 6.2. Our running example, 1Z tw \ C e, is local, since all left-hand sides of rules are 
linear and fully extended (in fact, they contain no abstractions at all). 

To demonstrate the prominence of local AFSs, in the 2011 version of the Termination 
Problem Data Base, used in the annual termination competition |38j, 138 out of 156 
benchmarks in the higher-order category are local (in fact, these are all left-abstr action- free) . 
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6.3. Tagging Unreducable Symbols. Obviously, when there are rules where the left- 
hand side contains an abstraction, such as f(\x.g(x),F) — > r, it may be impossible to avoid 
reducing inside an abstraction in order to create a redex. However, the colouring intuition 
still goes through; we merely need to "paint symbols green" a few times more. 

Following the colouring intuition, we will mark all function symbols which occur between 
a A-abstraction and its binder with a special tag ("colouring red"). The symbol can only be 
reduced by removing the tag first ( "painting green" ) . 

Definition 6.3. Let T~ be the set {/~ : a \ f : a £ J 7 }, so a set containing a "tagged" 
symbol /~ for all function symbols / G T . For a set of variables Z, define tag z as follows: 

tag z (x) = x 

tag z (c CT ) = c CT 

tag z (s-t) = tag z (s) -tag z (t) 

tag z (Ax.s) = Xx.tag zu{x} (s) 

taff (fU , ^ / /(tag z (si),...,tag z ( an )) if FV(f(s))nZ = d> 

tag zim ,...,s njj - | /-(tag z ( ai ),... J tag z ( SB )) if FV(f(s)) n Z ^ 

We denote tag(s) := tag (s). Define TZ t3g := {I -)• tag (r) | / — > r G 1Z} U {/~(xi, . . . ,x n ) ->■ 
/(xi,...,x n ) | /- G J 7 "}. 

Note that, apart from the untagging rules, lZ tag isn't all that different from 1Z: tag(r) is 
almost exactly r, only the symbols below an abstraction may be marked with a — sign. 

Example 6.4. tag(f (Xx. g(x, g(o)))) = f (Ax. g _ (x, g(o))). 

Example 6.5. Consider our running example 7£ t wice (with completed rules): 

l(o) ->■ o twice(F) ->■ Xy.F-(F-y) 

l(s(n)) — > s(twice(Ax. I(x)) • n twice(F) ■ m — >■ F ■ (F ■ m) 

We have seen that T^twice is local. 7£ tag consists of the following rules: 

l(o) ->■ o twice(F) -> Xy.F-(F-y) 

l(s(n)) ->■ s(twice(Ax. • n) twice(F) • n ->■ F ■ (F ■ n) 

o~ — >■ o s ~( n ) - ^ s(n) 

l _ (n) — >■ l(n) twice~(F) — >■ twice(F) 

That is, the rules from 1Z, with a tag added to the I symbol which occurs below an abstraction, 
and furthermore the untagging rules. In termination proofs we can typically ignore the rules 
f~[x) —7- f(x) where / _ does not occur in the right-hand side of any rule (in this example: 
o~ — > o, s _ (ra) — > s(n) and twice" (F,n) — > twice(F, n)), as they have little function. 

In the proofs later on in this section, we will use the following properties of 1Z tag : 

Lemma 6.6. tag XuY (s) — ^ tag tag x (s) for any set of rules 1Z; if the variables in Y don't 
occur in s even tag XuY (s) = tag x (s). 

Proof. Easy induction on the size of s; we only use the untagging rules f~(x) — > fix). □ 
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Lemma 6.7. tag(s)7 tag = tag(s7) where 7 tag = [x := tag(7(x)) | x £ dom(7)]. 

Proof. We prove by induction on the size of s: for any set of variables Z, whose members 
do not occur in either domain or range of 7, we have tag z (s)7 tag = tag z (s7). 
If s is a variable not in dom(7), both sides are just s. 

If s is a variable in dom(7), we must see that tag(7(s)) = tag z (7(s)), which holds by 
the second part of Lemma |6.6| 

If s is an application t ■ u, then tag z (s)7 tag = (tag z (i)7 tag ) • (tag z (u)7 tag ), which by the 
induction hypothesis equals tag(i7) • tag(«7) = tag((t7) • (wy)) = tag(s7). 

If s = f(si, ■ ■ ■ ,s n ) the induction hypothesis on each of the also suffices because 
Z n FV(s) = Z n FV(sj), which is easy to see by the requirements on Z. 

Finally if s = Ay. sf , then tag z (s) 7 tag = (Ay. tag ZuM ( S '))7 tag = Ay. (tag Zu{j/} ( S ')7 tag ), 
which by the induction hypothesis equals Ay. tag Zu r y i (^'7) = tag z (sj) as required. □ 

Lemma 6.8. If Z is a set of variables, s,t terms and x a variable not in Z or FV(t), then 
tegzu{x}( s )l x '■= ta gz(*)] ->h*z ta &z( s i x '■= *]) f or an V set °f rules 

Proof. By induction on the size of s. 

If s = x, then both sides are equal to tag z (t). 

If s is another variable y, then both sides are just y. 

If s = u-v we use the induction hypothesis: tag Zu ^ x y(s)[x := tag z (t)] = tag Zu ^ x y(u)[x := 
tag z (t)] • tag zu{x} (v)[x := tag z (t)\ ^ tag tag z {u[x := t\) ■ tag z (v[x := t\) = tag z (u[x := 
t] ■ v[x := t}) = tag z (s[x := t]). 

tag zu{a .}(s)[x := tag z (t)] 



If s = Ay. u, we use the second part of Lemma 



6.6 



•%-tag Zu{:Ei3/} (u)[x := tag z (t)], which by Lemma [DTpjequalsAy. tag Zu{xy} (u) [x := tag zu{y} (i)] 
— >|jtag Ay. tag ZU { y }(tt[x := t\) = tag z (s[x := t]) by the induction hypothesis. 

Finally, if s = f(ui, . . . ,u n ), then there is little to do if x does not occur in s: by the 



second part of Lemma 6.6, tag^r^i {s)[x := tag z (i)] =tag z (s)[x := tag z (t)] and since x does 
not occur in either s or tag z (s), this is exactly tag z (s[x := t]). So assume that x S FV(s); 
then tag zu{l . } (s)[x := tag z (t)j = /-(tag Zu{x} (ui), . . . , tag Zu{x} (u n ))[x := tag z (t)], which by 
the induction hypothesis reduces to /~(tag z (ui[x := t]), . . . ,tag z (u n [x := t])). If variables 
of Z occur in s[x := t] this is exactly tag z (s[x := t]), otherwise it reduces in one step to 
/(tag z (ni[x := t] ),..., tag z (u n [x := t})) = tag z (s). □ 

The following lemma expresses that a reduction to a term of a certain form / can be 
done by only reducing subterms headed by untagged ( "green" ) symbols. Later on, we will 
use this to see that the reduction t{ — >\ Sj + i in a dependency chain can be assumed to 
reduce only untagged symbols. 

Lemma 6.9. Let 1Z be a local AFS, I a linear, fully extended term and 7 a substitution on 
domain FV(l). If s is terminating and s — >^ lj, then there is a substitution 5 such that 
tag(s) -fc^tag lS t3& , where 5 t3g = [x := tag(<5(a;)) | x G dom(<5)], and S(x) — >^ 7(2;) for all x. 

Proof. Towards an induction hypothesis, we will prove the lemma for a term / which is linear 
and fully extended in the variables in dom(7), and such that dom(7) C FV(l); I may have 
more variables which do not occur in this domain, and which it is not necessarily linear and 
fully extended in. We use induction first on s, using — >n U\> (this is well-founded because s 
is terminating by assumption), second on the length of the reduction s — Kj^ Ij. 
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First suppose I is a variable in dom(7), so 7 = [I := 7(7)]- Choose 5(1) = s. Then 
certainly 5(1) — ^ j(l), and tag(s) — ^ tag tag(s) = I5 tag . If I is a variable not in dom(7), and 
s — >^ l-y = I without headmost steps, then 7 is empty and s = I; indeed tag(s) = I — K^ tag I. 

Next, let I be an abstraction Ax. I' and suppose s = Ax. s' and s' — >^ I'j. Since I is fully 
extended in the variables of dom(7), this I' contains no variables in dom(7); that is, 7 is 
empty, and we must see that tag(s) — I. By the induction hypothesis tag(s') — Kj^ I', and 
therefore indeed tag(s) = Xx.tagr x y(s l ) — >\ tag Ax.tag(s') by Lemma 6.6, — >\ i3g Xx.V = I. 

If / = f(h, ■ ■ ■ , l n ) and s = f(s\, . . . , s n ) and each Sj — ^ ^7, then by linearity of Z each U 
has different variables (at least, insofar as dom(7) is concerned). We can write 7 = 71 U. . .U7„, 
with each 7, the restriction of 7 to dom(Zj); all 7^ have disjunct domains. Then also Sj — ^ ZjTj, 
so by the induction hypothesis there are 5i, . . . , 5 n such that each tag(sj) — )-^ t a g k^**, and 
always o~i(x) — ^ 7i(x). The induction step holds with (5 := <5i U . . . U 5 n . 

If I = li ■ I2 and s = s± ■ S2 and each Sj ^7, we use linearity in the same way. 

If none of these cases hold, the reduction s — >^ Z7 must use a headmost step, so 
s — Kfj u — >-tj w — Z7, and either: 

• n = (Ax. w) ■ qo ■ ■ ■ q n and v = w[x := qo] • q± ■ ■ ■ q n (n > 0), or 

• n = ^'7' • q\- ■ ■ q n and v = r ,r y' ■ q%- ■ ■ q n for some I' — > r', 7, q%, . . . , q n (n > 0) 

We can safely assume that the reduction s — u does not use any headmost steps. 

In the first case, s must have the form (Ax. w') ■ q' ■ ■ ■ q' n with w' — >^ w and each 
l'i li- -^ u * then also w'[x := ^q] • q[ ■ ■ ■ q' n — >\ v — ^ Z7; by the first induction hypothesis 
we find a suitable 5 such that s — >p w'[x := q' ] ■ q[ ■ ■ ■ q' n — >^ tag I5 tag . 

In the second case, let I" := I ■ x\ ■ ■ ■ x n for fresh variables xi, . . . , x n , and let 7" := 
7' U [xi := q±, . . . , x n := q n \. Since I' — > r' is a rule, I" is both linear and fully extended, and 
the reduction to = u is shorter than the original reduction; by the second induction 
hypothesis we find x suc h that tag(s) — ^ tag l"x tag = l'x tag ' ( x iX tag ) ' ' ' (^nX tag )> where each 
x(y) reduces to j'(y) for y G dom(7 / ), and x( x i) H- 



Now, l"x tag -^n ta z tag(r')x tag ■ (xx tag ), which by Lemma 6.7 = tag(r'x) ■ (x*x tag ) = 
tag((r' • x)x)- By simply removing all tags, every — ^tag step can be translated to a — >^ step 
on untagged terms, and therefore we also see that s — >^ l"x —>n (r • x)x, and by the choice 
of x we know: (r ■ x)x — ^ (^'7') • q — ^ Z7. Therefore we can apply the first induction 
hypothesis, and see that tag(s) — K^ tag tag((r • x)x) — ^t ag Z<5 tag , for a suitable 5. □ 



In Section 6.5, Lemma |6.9| will play an essential role in the construction of a "tagged 
dependency chain". But first, let us consider formative rules, another gain from locality. 



6.4. Formative Rules. Recall that in the first-order setting it is not required to prove 
I >z f for all rewrite rules: to prove that a set of dependency pairs V is chain-free it suffices 
to consider only its usable rules. The definition of usable rules cannot easily be extended to 
our setting, because we normally have to deal with collapsing dependency pairs. Therefore 
we take a different approach with the same goal of restricting attention to rules which are in 
some way relevant to a set of dependency pairs. Where usable rules are defined from the 
right-hand sides of dependency pairs, our formative rules are based on the left-hand sides. 

The intuition behind formative rules is that (due to left-linearity and full-extendedness) , 
only the formative rules of some rule I —> r can contribute to the creation of its pattern. 

We consider a fixed set of rules 7Z, which has already been completed. The formative 
rules are a subset of 1Z + , which is the set TZ U {I • X\ ■ ■ ■ x n — > r ■ x\ • • • x n \ I — > r G TZ, all X{ 
fresh variables, r not an abstraction and I ■ x\ ■ ■ ■ x n well-typed}. 
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Definition 6.10 (Formative Rules). Let X be a set of variables, and s a /3-normal term 
(that is, s lias no subterms (Ax. t) ■ u) such that for any subterm x ■ t of s with x G V, either 
x is not free in s, or x G X. Let Symb x (s) be recursively defined as follows: 



Symb x (f(si, 



Symb x (\y.s : a) 

. . . , S n ) • Sn+l ■ ■ ■ S m . c) 

Symb x (y ■ si ■ ■ ■ s n : a) 



{(ABS,a)}USymb Xu{y} {s) 
{(/, cr)} U Symb x (si) U . . . U Symb x {s m ) 
{(VAR,a) U Symb x (si) U . . . U Symb x (s r 
(y G X, n > 0) 
Symb x (y) = (y G V \ X) 



Note that in a local AFS, all left-hand sides of the rules satisfy these constraints for X = 0. 

For a G J- U we say a term s : cr /ias /orm (a, a) if either a = ABS and s 

is an abstraction, or a G J- and s can be written a(t) ■ u, or s = x ■ t for some variable x 
(and a may be anything). A pair (a, cr) with o£ JU {ABS, VAR} is called a iyped symbol. 

For two typed symbols .A, B, write A Qf B if there is a rule I — > r G 7£ + such that r 
has form A, and -B G Symbol). Let denote the reflexive-transitive closure of C/ . 

The formative symbols of a term s are those typed symbols B such that A B for 
some j4 G Symb^s) (if defined). 

The formative rules of a term s, notation FR(s), are those rules I — > r G 7£ + such that 
r has form B for some formative symbol 6 of s. 

The set of formative rules of a dependency pair, FR{f{l\, ...,/„)• l n +i • • • lm ~» p)j is 
defined as (Ji<j<m FR(k). For a set of dependency pairs, FR{V) = Ui~M>sP ^ p)- 

Note that in a finite system it is easy to calculate the formative symbols of a term, and 
consequently the formative rules can be found automatically. 

Example 6.11. Recall the rules for the (completed) system twice: 

(A) l(o) -»• o (C) twice(F) -> \y.F-{F-y) 

(B) l(s(n)) -4 s(twice(Ax. I (a;)) • n) (£>) twice(F) • m -> F ■ (F ■ m) 

Here 1Z + = 1Z. In this context, let I = s(n). Then Symbol) = {(s, nat)}, and: 

• (B) and (D) both have form (s, nat), so (s, nat) Cy (s, nat), (I, nat), (twice, nat) 

• (D) also has forms (I, nat) and (twice, nat), but no other rules do 

Thus, the formative symbols of I are exactly (s, nat), (I, nat) and (twice, nat). (B) and (D), 
but not (A) and (C), are formative rules of I. Observing that a dependency pair with left- 
hand side twice(F) -n or twice" (.F) has no formative rules (since Symb^(F) = Symb^{n) = 0), 
the formative rules of the SCC C tw j ce from Example 5.13 are (B) and (D). 

Example 6.12. For an example that uses multiple types, and more rules of functional type, 
consider the system with symbols 

[(nat=^nat) x funlist] funlist 



cons 
head 
true 
test 
if 

And rules: 



[f unlist] =4> nat nat 
bool 

[nat=^ nat] =4>bool 

[bool x (nat=^ string) x (nat = 



nil 
tail 
false 
s 

■ string)] =4 



nat 



funlist 
[f unlist] = 
bool 

[nat] =>■ nat 
string 



funlist 



(A) if(true,Fi,F 2 ) -4 F\ 

(B) if(false,Fi,F 2 ) -4 F 2 

(C) test(Ax. s(x)) — > true 



(D) head(cons(F,t)) 

(E) tail(cons(F,i)) 



F 
t 
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For 1Z + , we add the rules: 

(F) if(true,Fi,F 2 ) -x F x ■ x 

(G) if(false,Fi,F 2 ) -x F 2 ■ x 

(H) head(cons(F,t)) • x F-x 

This is a contrived example, to demonstrate all aspects of formative rules in one system. We 
consider the formative rules of the dependency pair if (true, F\,F 2 ) ■ x ^ F\ ■ x. That is, 
Fi?(true), since the free variables F\,F 2 ,x do not have formative rules. We observe: 

• Symb^(tr\ie) = (true,bool) 

• rule (C) is the only rule with form (true,bool), so (true,bool) Qf (test,bool), 
(ABS, nat=^ nat), (s, nat), ( VAR, nat), that is, the elements of Symb ^(t est (Xx. s(x))); 

• (ABS, nat => nat) Qf (head, nat => nat), (cons, funlist) by rule (D), and rule (H) has both 
form (s, nat) and (VAR, nat), so these two Qf (head, nat), (cons, funlist); no other rule 
has a form (test, bool), (ABS, nat=> nat), (s, nat) or ( VAR, nat) 

• (D) also has form (head, nat=^ nat) (but we already know that all symbols in the left-hand 
side are formative symbols of true), and only (E) has form (cons, funlist), so the latter 
Qf (tail, funlist), (cons, funlist) 

• Hence, the formative symbols of the given dependency pair are: 

(true, bool), (test, bool), (s, nat), ( VAR, nat), (head, nat), (cons, funlist), (tail, 
funlist), (ABS, nat =^ nat), (head, nat=^nat). 
The formative rules are therefore (C), (D), (E) and (H). 



For formative rules we have a result very similar to Lemma 6.9 both in nature and in proof. 

Lemma 6.13. Suppose 1Z is local, and let I be a (3-normal, linear, fully extended term, 
which does not have leading free variables. Let 7 be a substitution with domain FV{1), and 
s a term which is terminating over and suppose s — ^ Z7. Then there is a substitution 
5 on FV(l) such that s — >p^n\ IS, and moreover each 5(x) — ^ 7(x). 

Proof. We will prove something slightly stronger, which implies the lemma. Let X be a set 
of variables, and / a /3-normal term, linear in FV{1) \ X, and such that if a free variable x 
occurs inside an abstraction, or at the head of an application in I, then x £ X. Let 7 be a 
substitution with domain FV(l) \ X, and s a terminating term such that s lj- 

Let FSx(l) denote the set of typed symbols B such that A C* o B for some A G Symb x (l), 
and FRx(l) is the set of rules /' —> r' in 1Z + such that r' has form B for some B G FSx(l)- 
We will find a substitution 5 on FV(l) \ X such that s —>*p R a\ IS, and always 5(x) — 7(2;). 

It is clear that, for X = 0, the definitions of FRx(l) and FR(l) coincide. Thus, the case 
X = implies the lemma - but for the induction step we will need a larger X. 

Before proving this claim, let us make the following observations: 

(1) if Symbx(s) C Symb Y (t), then FS x (s) C FS Y {t), so FR x (s) C FR Y {t) 

(2) if the variables of Y do not occur in s, then Symb X \jY( s ) = Symb x (s) 

(3) if s > t and Y = FV(t) \ FV(s), then Symb XuY (t) Q Symb x (s) 

(4) if u -> v 6 FRx(s), then F5 (n) C FS x (s) 

All of these are obvious by considering the respective definitions. 

Now we have all the preparations to prove the required result, using induction on s with 
—>n Ut>. Because the rules have been completed and I is /3-normal, we can first transform 
the reduction s — Ij into a reduction which never takes a headmost step with a rule 
I' — > Xx. r' which is not also a topmost step (we can replace these steps one by one, and by 
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induction on s with — he we eventually obtain a reduction without such steps). Having done 
this, we use a second induction, on the length of the reduction s — Kj^ Z7. Now, we can prove 
the claim. Consider the form of Z. 

If Z is a variable in dom(7), then 7 = [I := 7(Z)]; choosing 6 := [I := s] we are done. 

If I = x ■ l\ ■ ■ ■ l n with x € X, and s = x ■ s± ■ ■ ■ s n and each Sj — Kj^ ^7, then by linearity 
of Z over dom(7) we can write 7 = 71 U . . . U j n where ji is the restriction of 7 to FV(li). By 
the induction hypothesis we can find 8\, . . . , 5 n such that each Si —>fr x (1) k$i an d Si — >^ 7^. 
Choose <5 := 5\ U . . . U 5 n ; this is well-defined because all 5{ have disjunct domains. By ^ 
and |T| each FRx{h) Q FRx(l), so indeed s —^*fr x (1) IS, and also each S(x) — >^ 7(x). 

Ifl = f(l Xi . . . , Z m ) • l rn+1 and s = f(si, . . . , s m ) • s m+ i • • • s n and each ^7, 

we use linearity in almost exactly the same way. 

If Z = Xx. I' and s = Ax. s' and s' — Kj^ Z'7, then by assumption the term Z' contains only 
variables in X, so dom(7) = 0; we must show that s' -^* FRx ^ I'- By (|3j), (|2j) and (jTJ) , it 
suffices if s' — >># x (;/) ^'j and this is exactly what the induction hypothesis gives us! 

By the restrictions on I, it must have one of the forms above; if we are not yet done, 
therefore, the reduction s — Kj^ Z7 uses a headmost step. 

If s has the form (Ax. t) ■ u ■ v, then the first headmost step must be a /3-step: s — Kj^ 
(Xx.t') ■ v! ■ v —>p t'[x := u'] • i>' — Kj^ Z7; we might as well /3-reduce immediately, and have 
s — >p t[x := u] ■ v — >^ t'[x := u'] ■ u' — & Z7; the first induction hypothesis gives a suitable 5. 

If s does not have this form, there is at least one headmost step which is not a /3-reduction. 
The reduction has a form s — >\ t —he u — ^ Z7, where i = Z^' • ui • ■ ■ v n —he r >r y' ■ v\ - ■ -v n 
for some rule I' — > r' , substitution 7' and terms v\, . . . , v n (n > 0); we can choose t, u in 
such a way that the reduction u — >^ Z7 does not contain any headmost steps other than 
perhaps /3-steps. Let I" := I' ■ x\ ■ ■ ■ x n and r" := r' ■ x\ ■ ■ ■ x n for suitably typed fresh 
variables x±, . . . ,x n ; then I" — > r" is in 1Z + , because we have made sure that either r' is 
not an abstraction, or n = 0. Let 7" := 7' U [xi := v±, . . . ,x n := v n ]. Then t = l"^/" 
and u = r" r y". Applying the second induction hypothesis on the reduction s — >^ we 
find some substitution \ such that s — >* FRfIi ^n^ l"x ~^"R. r "x r "l" ^7- Note that 
FR^il") C TZ + ', and that — >n+ defines the same relation as —he- Thus, s — >-|j Z"x — ?-7e ^"x; 
we can apply the first induction hypothesis to find a suitable 5 such that r"x ~^*fr x (1) ^' 

Suppose I" r" G FR x (l). Then by @ and also Fi? (Z") C FR x (l), so we have a 
reduction s -^*f Rx ^ l"x ~^fr x (i) r "x ~^*fr x (i) ^> an d we are done. To see that this is indeed 
the case, first suppose that head(r') is a variable. Whatever the form of I is (since I ^ dom(7)), 
Symb x (l) contains a pair (f,cr), where a is the type of I (and also the type of s, Z" and r"), 
and / e TU {ABS, VAR}. We immediately see that I" r" G FR x (l). Alternatively, if 
head{r') is a function symbol, then u is not a /3-redex; as the reduction -u — ^ Z7 does not 
use other headmost steps, we have u — >\ in Z7, and Z = f(h, . . . , Ik) • h+i ■ • • ^m, where / is 
also the head-symbol of r'. But then (/, a) £ Symb x (l), so also I" — > r" £ FR x (l)- □ 



Of course, Lemma 6.13 and Lemma 6.9 can be combined: the latter doesn't care 
which rules it is given, so if s — ^ Z7, then there are 5, x such that s —^ FR n) ^, and 
tag(s) — >* FR ,nu g lx t3g an d each x( x ) ~^*fr(1) ~^tz 7( x )- ^ n the following, we will use this 
combination of lemmas to see that, for local AFSs, a dependency chain can be assumed to 
use tagged steps and formative rules in the reduction U — >^ in Si+i- 
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Comment: The formative rules technique is also applicable to first-order rewriting, in 
particular for many-sorted TRSs (or for innermost rewriting where types may be added 
by [Z]). However, we have not yet investigated whether the technique leads to an improvement 
in current state-of-the-art termination provers. 



6.5. Revised Dependency Pair Results for Local AFSs. We may now revise the 
results from Section [5] to take locality into account. As before, we assume that the rules 



in TZ are all completed, and let DP be the dependency pairs of TZ. Because of Lemmas 6.9 



and 6.13 we can consider an alternative definition of dependency chain. 

Definition 6.14. A tagged dependency chain is a sequence \{p%, Si,ti) | i € N] with for all i: 

(1) pi £ DP U {beta} 

(2) if pi = li pi £ DP then Sj = Zi7 tag and ti = tag(pj)7 tag for some substitution 7 

(3) if pi = beta then Si = tag((Ax. u) ■ v ■ w\ ■ ■ ■ Wk) and either 

(a) k > and ti = tag(u[x := v\ ■ w\ ■ ■ ■ Wk), or 

(b) k = and there exists a term w such that u>w and x € FV(w) and ti = tag(w"[x := 
v\), but w 7^ x 

(4) ti — >* FR (i i+1 yaz tin Si+1 

A tagged dependency chain is minimal if untag(u) is terminating under —7-7^. for all strict 
subterms u of each ti (where untag{ ) removes the — tags). 

This definition is similar to the original definition of a dependency chain, but uses tags 
for Si and ti and limits the rules in the — >* reduction to the formative rules of the pattern 



which is created. We obtain the following variation of Theorem 5.9 



Theorem 6.15. A local AFS TZ is non-terminating if and only if it admits a minimal tagged 
dependency chain. 

Proof. If we remove the tags from a tagged dependency chain, we obtain a normal dependency 
chain. Since local AFSs are left-linear, Theorem |5.9| provides one direction. 

For the other direction, we follow the proof of Theorem 15.71 in each step i we have a 
minimal non-terminating, untagged term qi, and ti = tag(g'). If head(qi) is an abstraction we 



follow the proof of Theorem 15.71 to find q%+i; the requirements of Definition 6.14 are satisfied 
for s i+ i := tag(ft) and t i+1 := tag(^ +1 ). Otherwise, let % = f(vx, ...,v m )- v m+1 ■■■v n . 

Since qi is MNT, an infinite — ^-reduction starting in q$ must eventually take a headmost 
step, say qi — >^ in Z7 • v' k+1 ■ ■ ■ v' n (with k > m), where I — > r G TZ and rj ■ v' k+1 ■ ■ ■ v' m is still 

non-terminating. Write I = f(h, ■ ■ ■ , l m ) • l m +i ■ • • hi by left-linearity all lj have disjunct free 



variables. Applying Lemmas 6.9 and 6.13 on each of the Vj and lj (with the suitable part 7^ 



of 7), such a redex can be reached with tagged steps and formative rules: tag(uj) — >*„ Rn ~, t3g 

/j<5* as , and 5j — >^ jj. Choosing 5 := 5iU. . .U5 n we have that r5-Vk+i ■ ■ ■ v n — ^ r^-v' k+l ■ ■ ■ v' n 
is still non-terminating. Let q[ := 15 ■ Vk+i •••v m and Sj+i := lS t3g • tag(ufc + i) • • -tag(v m ) 
and continue the proof as before; in the resulting dependency pair li + i ~» p; L+ i all lj are 
immediate subterms of h+i, so FRilj) C FR{li + \ ~> Pi+ij- We have qi + \ = \pi+\\x f° r some 



substitution x, so := tag(gj + i) = tag(pi + i)x ta& as required, by Lemma 6.7 □ 
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Example 6.16. Consider once more the non-terminating system from Example 5.8 

f(o) -)• g(Ax.f(x),a) g(-F,b) ->■ F-o a ->■ b 

Noting that TZ tag consists of the rules 

f(o) -> g(Ax.f-(x),a) g(F,b) ->■ F-o 

a -> b i~(x) -> f(x) 

as well as some other rules h~(x) — > h(x), we have the following tagged dependency chain: 

( f»(o)^g»(Ax.f-(x),a), f»(o), g»(Ax.f-(x),a) ) 

( g«(F,b)^F-o, g(Ax.f-(x),b), (\x.f-{x))-o ) 

( beta, (Xx.f-(x)) ■ o, f«(o) ) 

( f«(o)-gtt(Ax.f-(x),a), ftt(o), g«(Ax.f-(x),a) ) 



Here, the beta step uses case 3b with w = f(x). 

As in Section[5]we consider the dependency graph of 1Z. A set V C DP is tagged-chain-free if 
there is no minimal tagged dependency chain using only dependency pairs from V, and beta. 
As before, is tagged-chain-free, and 1Z is terminating if and only if every SCC in a graph 
approximation is tagged-chain- free. Thus, we can use reduction triples which orient the 
parts of a tagged dependency chain. Importantly, this affects the limited subterm property. 

Definition 6.17 (Tagged Subterm Property). h has the tagged subterm property if the 
following requirement is satisfied: for all variables x and terms s,t,u such that s^>u[>x, 
there is a substitution 7 such that tag((Ax. s) ■ t) h tag(v$[x := ^7). 

As we will see shortly, the tagged subterm property is an improvement over the limited 
subterm property because we do not have to take the subterms of untagged functional terms 



f(s). It is easy to adapt the proof of Theorem 5.16 to obtain the following result: 



Theorem 6.18. A set V = Vi W V2 of dependency pairs is tagged- chain- free if V2 is 
tagged- chain- free and there is a reduction triple (V, ^1, >-) such that: 

• I y tag(p) for all I ~> p G V\; 

• I h tag(p) for all I ~> p € V2; 

• I hi tag(r) for all I -> r G FR(V); 

• f~(x) hi f [x) for all f- G T~ ; 

• either V is non-collapsing or h has the tagged subterm property. 

Proof. If the properties above are satisfied, then every minimal tagged dependency chain over 
V leads to an infinite decreasing > — chain, contradicting well-foundedness of y. The elements 
of this proof are straightforward, following the proof of Theorem 5.16[ except perhaps for 



the proof that there is a substitution 5 such that S{ h U5 when Sj = tag((Ax. u) ■ v ■ w) and 
either ti = tag(g"[x := v]) (if \w\ = and u > q > x), or t{ = tag(u[x := v] ■ w). 

The first case of this holds by the tagged subterm property: tag(sj) = tag( (Ax. u) ■ v) h 



tag(q r '[x := v]j) for some 7, and this equals tag(g"[x := v])"f tag by Lemma 6.7. let 5 := 7 tag 



For the second case, tag(sj) = (Xx.tagr x \(u)) ■ tag(v) ■ tag(w) h tagr x \(u)[x := tag(u)] 



tag(uJ) (since ^1 includes beta), h tag{u[x := v]) ■ tag(w) = tag(tj) by Lemma 6.8 and 



because always / (x) hi f(x). □ 
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Theorem 5.18 also has a counterpart: if a local AFS is non-terminating, then there 
is a reduction triple which satisfies the constraints of Theorem |6.18| for V = V\ = DP: if 
(^i y) is the reduction triple from Theorem 5.18, let s R' t if untag(s) R untag{t). Then 
(y', y'i, y') satisfies the required properties. 

Theorem |6. 18 is comparable to Theorem 5.16, and as before, the result is likely not immedi- 
ately usable due to typing problems. Moreover, it is not obvious that the tagged subterm 
property is really weaker than t he lim ited subterm property. So to complete the work, we 
re-examine the results of Section 5.5 To start, let us reconsider the definition of > ! . 

Definition 6.19 (Refinement of > ! ). Let S be a special set of function symbols. \> s is the 
relation on base- type terms (and > s its reflexive closure) generated by the following clauses: 
• (Ax. s) • *q • • • t n > S u if s[x := to] ■ t\ ■ ■ ■ t n > s 



u 



S ■ t\ ■ 



■ ■ , Sm) -t\- 

■ t„ > S U if tj 



■ t n > u if Si • c > b u and / G S 
c > u (s may have any form) 



here we differ from [>' 



Note that our original definition of >• is just a special case of this definition; >• can be 
described as [>- F . For local AFSs, we can limit ourselves to , shortly denoted >~. 
In correspondence with Theorem 5.21, we derive the following result: 

Theorem 6.20. A set of dependency pairs V = V\ W V2 is tagged-chain-free if V2 is 
tagged- chain- free and there is a reduction pair such that: 

(1) I y tag(p) for alll~~>p£ Vi; 

(2) I >: tag(p) for alll~~>pe V 2 ; 

(3) I h tag(r) for all I ^ re FR(V); 

(4) f~(xi, ...,x n )y f(xi, ...,x n ) for all f~ G T~ ; 

(5) ifV is collapsing, then (V, y) respects >~ , and f~(x) y /"(x) for all f G V. 



Proof of Theorem 6.20. Let (y, y) be a reduction pair satisfying the requirements in the 
Theorem, and let (>,>i,>) be the reduction triple generated by >-) as defined in 
Section 5.5 This triple clearly satisfies the first four requirements of Theorem |6. 18 For the 
last one, let V be collapsing; we must see that > has the tagged subterm property. 

So let x, s, t, u be given such that s>u>x. We must see that (Ax. tagr^^s)) -tag(t) - y (y 
U y)* tag(n^[x := t]j) ■ v for some substitution 7 with x ^ dom(7) and some terms v. Since 
y contains beta and tag| x }(s • y) = tags x \(s) ■ y it suffices if we can prove that for all 
base-type terms q with q>u\>x we have: tagr^i (q) [x := tag(i)] (y U y)* tag(u"[x := ^7) -v 
for some 7, v. This gives what we need by choosing q = s ■ y. We prove this statement by 
induction on q, ordered with l> _ (it is easy to see that this relation is well-founded). 

Note (**): tag{ x } (w) h tag(w) by Lemma 

For the base case, let q 
teg{x}(u)[x :=tag(t)]-v[---v n , 
that tagr x i(it) y tag(w" 
which case tag{ x y(u) >z tag(u) = tag(w") by (**), or u does have this form and tag! x -\{u) 
/ _ (tag{ a .}(Mi),-.-,tag {l . } (u m )) y /-(tag(ui),...,tag(u ro )) h / t) (tag(u i ), . . . , tag(u m )) = 
tag(ti") by assumption (V is collapsing, so both properties from (JsJ) hold). Thus, tag^-j. (q) [x : 

tag(t)] h tag(u tt )[x := tag(t)] • v' = tag(n tl [x := t]) ■ v'. 
Now to consider each of the induction cases: 

(1) q = (Ay. s) ■ w ■ vi ■ ■ ■ v n and s > u\ 



6.6 



and because always g~(z) y g(z). 
- u ■ v\ ■ ■ ■ v n for some terms v. Then tags x \ (</) [x := tag(t)] = 
' where each v\ = tagi x }(vi)[x := tag(t)]. Since u\> x we know 
either u does not have the form f(ui, . . . ,u m ) with / G V, in 
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f(m, 



i) ■ v\ ■ ■ ■ v n and some Wi > u. 



(2) 

(3) q = q' ■ vi ■ ■ ■ v n and one of the Vi > u; 

These are the only forms g can have. In very general terms, each of these cases is easy 
because y U y includes > _ (in case [2] we use that FV(f(w)) contains x, so the tagging 
function replaces / by /~). Precise derivations are given below. 

In case [I] tag {x} (q)[x := tag(i)] b_ (tag {Xjy} (s)[y := tag {x} (w)] ■ tag {x} (v))[x := tag(t)] 



w 



) ■ ta E{x}(v))[x := tag(t)] by Lemma 



6.8 



and 



(since y contains beta), y (tagr^i (s[y 

this is exactly tag^ x y (s[y := w] ■ v)[x := tag(i)]. Since s[y := w] > u[y := to] we can use the 
induction hypothesis to find 7', v' such that this term (>- U y)* tag(u[y := w][x := t)j'$)-v' = 
tag(n[x := t][y := w[x := i]]7^) • v', which proves the statement for 7 := [y := w[x := t]]j'. 

In case 2j tag^ x y(q) = f~(tag^ x y(w)) ■ tag^ x y(v) because f(w) > x, and this (>- U y 
)* tagr x \(wi)- c = tag/j.!^ • c) because ()-, >z) respects We complete by induction. 

Finally, caseQ tag {x} (g) = tag {x} (q') ■ tag {x} (vi) ■ ■ ■ tag {x} (v n ) (y U h)* tag {x} (vi) ■ c = 
tag/ (vi ■ c), which by the induction hypothesis (>- U >£)* tag(n"7[x := t]) ■ v as required. □ 



Example 6.21. The dependency graph of twice has only one SCC, as given in Example |5.13 



and whose formative rules we calculated in Example 6.11| Therefore, by Theorems |6.18 



6.20, twice is terminating if there is a reduction pair (V, y) which respects [> , and 



and 

orients the following constraints: 



l«(s(n)) 
l»(s(n)) 
twice(F) • m 
l(s(n)) 
f~{x) 



y 
y 
y 
y 
y 



twice* (F) ■ x 



twice(Ax. I (x)) ■ n 
twice^(Aa;. I~(a;)) • c nat 
F-(F-m) 

s(twice(Ax. \~(x)) ■ n) 
f(x) (V/ G F) 

The top six are requirements for orienting dependency pairs, the next two are the formative 
rules of this SCC, and the final two are required to deal with the marked symbols. 



twice" (F) ■ x 
twice(F) • m 
twice(.F) • m 

f-(n) 



y 
y 
y 
y 
y 



F 
F 

F 
F 



(F ■ C nat ) 
Cnat 

m 

(F ■ m) 



/»(n) (V/ G V) 



Theorem 6.20 is a real improvement over Theorem 5.21 because (A) we only need to 
orient the formative rules of a set of dependency pairs, (B) the requirement that [>~ is 
included in >- U y is significantly weaker than the requirement for >■ to be included, and 
(C) the requirement that f(x) y p(x) was replaced by the requirement that f~(x) y P(x), 
which removes the direct relationship between a defined symbol and its marked version. In 
the next sections we will see how we can use this increased strength. 



7. Finding a Reduction Pair 

In this section, we will see two different ways of finding a reduction pair to solve the 
constraints generated by either the basic or local dependency pair approach. First, we 
consider how interpretations in a so-called weakly monotonic algebra can be used in the 
dependency pair setting. Second, we show how to use argument functions to alter an existing 
reduction pair such as the higher- order recursive path ordering. 
Whether we use Theorem 5.21 or Theorem 6.20| we have: 



a set £ of function symbols: in the basic case, S = Fc, in the local case S = T\ U {/ : 
o I / : 0- € F} 

a set S of "protected" funtion symbols: in the basic case, S = F, in the local case 
S = {/- : a I / : a € F} 
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• a set A of constraints of the form I >-■ p and a set B of constraints I y r: in the basic case 
these are given by the dependency pairs and the rules, in the local case the right-hand 
side is adapted with tag and B contains only the formative rules. 

In both cases, we must find a reduction pair (V, >-) such that I y p for at least one of 
the constraints in A, I y p for the remainder of them, and I y r for the constraints in B. 
Moreover, the reduction pair may have to respect [> s , which is definitely the case if: 

• s ■ t\ ■ ■ ■ t n y ti ■ c if both sides have base type; 

• /(si, . . . , s m ) ■ t y Si ■ c if / G S and both sides have base type 

We will consider two ways of finding a reduction pair which uses the possibilities created by 
the dependency pair approach. First, we shall consider weakly monotonic algebras, where 
we natively have a quasi-ordering y which is not just the reflexive closure of >-, and which 
is not a simplification ordering. Second, we show how an existing reduction pair can be 
modified with argument functions, a generalisation of the notion of argument filterings. 

7.1. Weakly Monotonic Algebras. A semantic method to prove termination of first- 
order term rewriting is to interpret terms in a well-founded algebra, such that whenever 
s — > t, their interpretations in the algebra decrease: [s] > [i] . Such an algebra is called a 
termination model if [Z] > [r] for every rewrite rule I — > r, and some additional properties 
guarantee that this implies [C[Z7]J > [C[r7]J for all contexts C and substitutions 7. A 
first-order TRS is terminating if and only if it has a termination model |17[ [39] . In his PhD 
thesis [32], van de Pol (extending on a joint paper with Schwichtenberg [33J ) , generalises 
this approach to HRSs, with higher-order rewriting modulo af3n, and shows that a HRS is 
terminating if it has a termination model; the converse does not hold. 

Here we consider interpretations of AFS terms in a weakly monotonic algebra, and use 
these to solve dependency pair constraints. Since > does not have to be monotonic when 
using dependency pairs, the theory of |32] can be significantly simplified. 

Type Interpretation In first-order algebra interpretations, all terms are mapped to an 
element of some well-founded set A. In the higher-order setting it turns out to be impractical 
to map all terms to the same set. Rather, terms of a type cr=^r are mapped to functions. 

As a basis, let A = {A, V, 0, >f\ where A is a set, V a binary operator on A, an 
element of A and > a well-founded partial order on A (with reflexive closure >), such that: 

• is a minimum element, so a > for all a £ A; 

• x V y > x and xV y >y for all x,y G A 

• iV0 = i for all x,y £ A 

To each type a we associate a set WM ff of weakly monotonic Junctionals and two relations 
□£, m and 3£, m , defined inductively as follows. 
For a base type t: 

• WM t = A, 

• ^wm = >> an d ^wm = — 

For a functional type a =^ r: 

• WMq-^t- consists of the functions from WM ff to WM r , such that ~^ wm is preserved (that 
is, if x Ulm V then f{x) f{y)), 



A might be a well-ordered monoid or a join-semilattice, but both of these have requirements on V which 
we will not need; with our definitions, V may be a supremum operator, but also for instance addition. 
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• / ^IZ T 9 iff f(x) □t«m 9(x) for all x G WM ff , 

• / 5 iff /(a:) g{x) for all x G WM ff . 

Thus, WMo-^t- is a subset of the function space WM CT — > WM r , consisting of functions which 
preserve ^ wm . □S, m ana - — ium are an order and quasi-order respectively for all types a, and 
they are compatible. We usually omit the type a in the notation, and write just Z\ wm and 
3uim- If either x Uwm V or x = y then x 3uim 

y, but the converse implication does not hold. 
This definition differs from the one in |32j in that we use only one set A rather than 
different sets A L for all base types l; this is done because we must occasionally compare 
terms of different types. The original definition also does not use an operator V (but does 
use a ©, which satisfies the requirements); this we added because we work with AFSs rather 
than HRS, and it is convenient to have a "maximum" function to interpret application. 

Term Interpretation For some valuable background, let us first consider the most relevant 
definitions and results from |32| . In the HRS formalism considered there, function symbols 
do not have an arity; they come equipped with a type, rather than a type declaration. An 
interpretation function J on the signature is used to associate to each closed term a weakly 
monotonic functional. Let s be a A-term, Jj an element of WM ff for all / : a G J 7 , and a a 
valuation which assigns to all variables x : a G FV{s) an element of WM ff . Then [s] j <a is 
defined by the following clauses: 

[f]j,a = Jf if/:aGJ- 
[j;]j iQ = a(x) if x G V 

[Xx.s]j :a = An.[s]j- jaU { x . l _ m }. if x ^ dom(a) (always applicable with a-conversion) 

Here, A denotes function construction: Xxi . . . x n .P(xi, . . . , x n ) is the function which takes 
n arguments x±, . . . ,x n and returns P(xi, . . . , x n ). 

Lemma 7.1. Some facts on these interpretations: 

(1) (Substitution Lemma) Given a substitution 7 = [xi := s±, . . . ,x n := s n ] and a valuation 
a whose domain does not include the X{: \s^\j^ a = [ s ]j,ao-y- Here, aoj is the valuation 
aU{x 1 ^ [si]j >a , ...,x n i-> [s n ]j, a }- 

(2) If s : a is a term, then [s]j ia G WM ff for all valuations a. 



Lemma 7.1[ 2 ) provides a convenient way to find weakly monotonic functionals. For 



example, For n G A and a = T\ . . . =>T^ 1 the constant function n a = Xx\ . . . x^.n G 
WM„ (as n a = [Xx\ . . . x n . y]{j /1 _>n})- Similarly, writing /(0) for /(0 Tl , . . . , Tn ), the function 
A/./(0) is in WM ff=!>l . A weakly monotonic functional not given in [32], but which will be 
needed to deal with term application, is max ff , defined as follows: 
max t (x,y) = x V y (for x,y £ A) 

max (T ^ r (/,y) = Ax. max r (/(x), y) (for / G WM CT=>T , y G ^l) 
Using induction on the type of the first argument (and once more Lemma [71P), it is easy 
to see that max,, G WM ff=;>1=;>17 . 

In HRSs, terms are a/3r/-equivalence classes, so [(Ax. s) • t]j ta = [s]j t a if x ^ FV(s), 
which is not very convenient in the present setting of AFSs, where terms are considered 
modulo a only. To adapt the results, we can think of application as a function symbol. 

Definition 7.2. A signature interpretation associates a weakly monotonic functional Jj G 
WM (T1=> ... =>crn=>T to every function symbol / : [a\ X . . . X a n ] =4>r of the signature. The pair 
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{A, J) is a weakly montonic algebra. A valuation is a function a with a finite domain of 
variables, such that a{x) € WM CT for every variable x : a in its domain. 

Fixing J and a, the interpretation of a term s, denoted [s]]j r ,a, is a weakly monotonic 
functional defined by induction on the definition of terms as follows: 

Wj,a = a(x) if x £ V 

[f(,8i,...,8 n )}j, a = Jf(lsijj,a,---,lSnjj,a) 

{Xx.sjj >a = \n.ls}j jaU { xH . n} if x <£ dom(a) 

We assume a is defined on all free variables of s. This definition corresponds with the one 
for HRSs, if we replace application by a function symbol which is interpreted with max. 

Example 7.3. In our running example twice, consider an interpretation in the natural 
numbers. Say J\ = Xn.n and J s = Xn.n + 1. Then [l(s(a;))]j- )a = a(x) + 1. 

Reduction Pair. Since Z\ wm is in general not closed under taking contexts, it cannot 
be used directly like in first-order rewriting: pj^a Z\ wm [ r lj r ,a does not in general imply 
[Cp7]l>7,Q □wn [C[ r 7]l J, a- This issue (which Van De Pol handles by imposing the restriction 
that Jt must be strict) disappears entirely in the context of dependency pairs. 

Theorem 7.4. Let J be an interpretion of the signature such that: 

• J maps each c CT to CT ; 

• for all f : [a% x . . . x a m ] t\ =4> . . . =^ =^ l G S, all 1 < i < m and all n G WM ffi : 
Jf(O ai ,. . . ,n, . . .,0^,0^,. . . ,0 rfc ) ] ra n(0). 

Define s y t if [s]j> Uwm {t}j,a for all valuations a, and s y t if {s}j j0 , Z\ wm \t\j, a for 
all valuations a. Then (y, y) is a reduction pair which respects t> s . 

Proof. It is easy to see that y is an ordering and y a quasi-ordering; y is well-founded 
because if / Z\ wm 9 then also f(0) Z\ wm /(0) (and Z\ wm is well-founded in A), y is monotonic 
as we see with a simple case distinction; if [sjj-^ ^2 wm lt}j t a for all a, then: 

• I s ' u Jj,a 12wm It • u}j ta by weak monotonicity of Xf.Xn. max(/(n),n(0)) 

• l u " s \j,a 3tom \u ■ t}j,a by weak monotonicity of Xf.Xn. max(/(n),n(0)) 

• [/(. . . , s, . . .)jj, a Uwm [/(• ..,t,.. .)jj, a by weak monotonicity of J f 

In addition, y contains beta because [[(Ax. s)-t}j >a = ^sx(lsjj, a o[x^ltl s>a ], Wj,q(0)) 3«,m 
[s] j t ao[x^itlj a \-> which is exactly \s[x := by the substitution Lemma. Compatibility 

is inherited from compatibility of Z\ wm and □«,m on A (where 3u>m is the reflexive closure 
of Z\ wm ): if s y t y u, then [s]j- )Q = Am . . . n k .f(n) Z\ wm {tjj, a = Xn.g(n) 3 mm {ujj^ = 
Xn.h(n), and we are done because also f{n) Z\ wm h{n). 

Finally, stability follows by the substitution Lemma: always HWylj^a = \u\ j^o^ , so if 
[sj^a Z\ wm \t\j,a for all valuations a, this also holds for the valuation a' = a o 7. 

As observed at the start of Section [7J (y, y) respects > s if: 

• [Ml J, a 3wm lU-cl j, a ] this holds because, by the use of max for applications, [[•s - tjj7' ja 3«>m 
[%,«(()) = max(. . . max([tj] >7)Q! (0), CT1 ), . . . , % n ) = {U ■ c]y, a ; 

3 E is the signature introduced at the start of Section 7 either T\ or T\ U {/ - : a \ f : a £ IF}. 
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• lf{s) ■ t\j,a Uwm {si ■ clj, a if / G S; this holds because [/(s) • ^ J>a Uwm Jf(lsi}j,a, 
■ ■ ■ ! II s nlj,Q, [*i].7,a, • • • , ltmjj,a), which by weak monotonicity and assumption □ TOm 

J/(0 ffl> ...,[«iI.7, a ,...,0 o . n ,0 ri ,...,0 Tm ) Uwm {Sijj,a(0) = bi-clj, a . □ 

Although it is not in general possible to (automatically) determine whether a suitable 
interpretation exists, one could for instance try polynomial interpretations over the natural 
numbers. Since addition and multiplication are both weakly monotonic, such an interpreta- 
tion is sound, and like in first-order rewriting there are some easily automatable techniques 
for finding suitable polynomials. The automation of individual reduction pairs is beyond the 
scope of this paper, however; we refer to [9] for a more detailed discussion. 

Example 7.5. To prove that C tw ice is tagged-chain-free, write C tw ice = V\ w here V \ 

consists of the two /" dependency pairs, and V2 of the remainder. By Theorem 6.18 it 



suffices to prove that V2 is tagged-chain- free, if we can find a reduction pair which respects 
>~ and orients the following requirements: 

l"(s(n)) y twice(Ax. \~{x)) -n twice" (F) • x y F ■ (F ■ c nat ) 
l"(s(n)) >- twice"(Ax. I~(x)) • c nat twice" (F) • x h F ■ c nat 
twice(F) • m >z F • (F • m) twice(F) • m >z F ■ m 

l(s(n)) >z s(twice(Ax. I - (x)) ■ n) twice(F) • m >z F ■ (F ■ m) 

f-(x) h /(f)(V/EF) f-(n) y /»(n)(V/€Z>) 

Let: 

• J\ = J\i = J\- = An.n 

• Jo = Jo- = 

• J s = J s - = An.n 

• Jtwice = Jtwice" = ^twice" = *f n -f(f( n )) 

Then it is clear that the bottom two constraints are satisfied. With some calculation we 
can see that the others hold as well, using the following case distinction for the twice cases: 
if m > F(m), then also m > F(F(m)) by weak monotonicity; if F(m) > m, then also 
F(F(m)) > m. Therefore max(F(F(m)), m) > max(F(max(F(m), m)), max(F(m), m)). 
To complete the termination proof of twice, it suffices to find a reduction pair such that: 

twice(F)-n !>- F ■ (F ■ n) twice" (F) • n y F • (F • c nat ) 
twice(F)-n >- F-n twice" (F) • n y F • c nat 

This is satisfied with an interpretation with v7 twice tt = Jtwice = A/n. max(/(/(n)), n) + 1. 
Example 7.6. A well-known example of higher-order rewriting is map: 

map(F, nil) — > nil 
map(F, cons(/i, t)) — > cons(F ■ h, map(F, t)) 



Applying Theorem 6.18| to prove termination, it suffices to find a reduction pair (V, y) with: 

map"(F,cons(M)) >~ F-h 
map"(F,cons(/i,t)) y map"(F,t) 
map(F, cons(/i, t)) y cons(F • h, map(F, t)) 

Note that the elements of S do not occur in the rules, so we can pretty much ignore them (see 
also Section [9]). Using an interpretation in the natural numbers with the usual greater than, 
and max-operator, consider the following constant interpretation: J m3p t = Xf.Xx.f(x) + 
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x, J map = Xf.Xx.x ■ f(x) + x, J cons = Xx. Xy .x + y + 1 . Taking a = [F := f,h := n, t := m], 
the requirements above become: 

f(n + m + 1) + n + m + 1 > max(/(ra),n) 
f(n + m + \)+n + m+ l > f{m) + m 
(n + m + 1) ■ /(n + m + l)+n + m + l > max(/(n), n) + m • f(m) + m + 1 

Taking into account that / must be a weakly monotonic functional, we of course have 
f(n + m + 1) > /(n), f(m). Thus, it is not hard to see that all requirements are true. 



7.2. Argument Functions. In Section 4.4 we saw that, in the first-order dependency 



pair approach, (simplification) orderings may be combined with argument filterings. Such 
filterings either eliminate some direct arguments s, from a term f(s\, . . . , s n ), or replace the 
term by one of the Sj. We consider an extension of this technique, called argument functions. 
Let E and S be sets of function symbols, as introduced at the start of Section [7j 

Definition 7.7 (Argument Function). Let T, ex be a set of function symbols, and tt a 
type-respecting function mapping terms f(x\, . . . ,x n ) with / e S to some term over Yf x \ 
we require that FV(jr(f(x))) C {x}. We extend tt to a function 7f( ), called an argument 
function, on all terms as follows: 

7f(s • t) = 7f(s) • 7f(t) 

7f(Ax. s) = Ax.7f(s) 

7f(a;) = x {x € V) 

7f(/(si,...,s n )) = 7r(/(xi, . . . ,x n ))[xi := 7f(si), . . . ,x n := 7f(s n )] 

An argument filtering is an argument function where each iv{f{x\, . . . , £ n )) has the form 
/'(xjj, . . . ,Xi k ), or Zj. However, we can choose 7r entirely different as well. For example, if 
7r(twice(x)) = Xy. x ■ y, then the term twice(An. \(n)) • o is mapped to (Xy. (An. I(ra)) • y) ■ o. 
An argument function tt has the S-subterm property if FV(7r(/(x))) = {x} for all / G S. 

Theorem 7.8. Let >-) be a reduction pair on terms over Y, ex . Define >, > on terms 
over E as follows: s >t iffw(s) y W(t) and s > t iffW(s) >~ W(t). 

Then (>, >) is a reduction pair. If tt has the S-subterm property and (V, y) respects >■ 
and s y c CT /or a// terms s of type a, then (>, >) respects \> s . 

Proof. We first make the following observation (**): 7f(s7) = 7f(s)7 7r , where 7 ?r (x) = W(j(x)). 
This holds by induction on the form of s. The only non-obvious case is when s = f(s\, . . . , s n ) 
and 7r(/(xi, . . . ,x n )) = p; then 7f(s7) = p[x\ := 7f(si7), . . . , x n := W(s n 'j)] = p[x% := 
7f(si)7 7r , . . . ,x n ■= 7f(sn)7 7r ] by the induction hypothesis, = 7f(s)7 7r because FV(p) C {x}. 

Having this, it is easy to see that > and > are both stable, and compatibility, well- 
foundedness, transitivity and (anti-)reflexivity are inherited from the corresponding properties 
of y and y. As for monotonicity of >, the only non-trivial question is whether /(si, . . . , s n ) > 
/(s'j, . . . , s' n ) when each S{ > s[, but this is clear by monotonicity of y_: if each 7f(sj) y 7f(s^), 
then W(f(s)) = n(f(x))[x := vf(s)] ^ 7r(/(x))[x := vf(s')] = W(f(s')). Also > contains beta 
by (**): 7f((Ax. s) • t) = (Xx.tt(s)) ■ W(t) y W(s)[x := 7f(i)] (as ^ contains beta), and this 
equals W(s[x := t}) as required. Thus, (>, >) is a reduction pair. 

As observed at the start of Section to see that (>,>) respects > s it suffices if 
s • t\ ■ ■ ■ t n > ti ■ c and f(s\, . . . , s m ) ■ t\ ■ ■ ■ t n > Si ■ c if both sides have base type, and 
/ G S. Suppose (^,>-) respects > ! and tt has the S-subterm property. Then obviously 
7f(s • t\ ■ ■ ■ t n ) = Tf(s) ■ W(ti) ■ ■ ■ 7f(i n ) h W(ti) ■ c = W(ti ■ c). 
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For the second part, let f £ S and q = f(s)-t; we must see that 7f(g) = 7r(/(xi, . . . , x m )[xi 
:= 7f(si), . . . ,x m := 7f(s m )] -7f(fi) • • -Tf{t n ) >z. 7r(si -c). Since 7r has the S-subterm property, Xj 
occurs in ir(f(x)). Therefore, 7f(sj) is a subterm of 7f(g) and it contains no free variables which 
are bound in Tf(q). But then we must have W(f(s) ■ i) l> ! W(si) ■ u for some terms u; since the 
c<j are minimal elements by assumption, this term y vf (sj) • c = W(ui ■ c) as required. □ 



Theorem 7.8 allows us to modify terms before applying an ordering. Even argument 
functions which respect the J-*-subterm property can be useful; for example, if there is a rule 
f(x%, . . . , x n ) — > r, then an argument function with 7r(/(x)) = r is probably a good idea. 



Using Argument Functions With CPO Unfortunately, Theorem |7.8| cannot directly be 
used with the higher-order recursive path ordering or the more powerful computability path 
ordering: these relations are not transitive, do not respect and do not have minimal 
elements. But we can alter either relation a bit, and obtain a usable reduction pair. 

Let >cpo be the relation given by CPO |4j, with some fixed status function, type 
ordering, and precedence >p on the symbols in £ \ C. Introducing new symbols @ a ' T , A°~' T 
and Co- for all types, extend the precedence with f >f @ a,T , A a,T , c a if / € £ \ C, for all 
types @ <J,T >f A a ,T >p c p and moreover @ a ' T >p @ p ' a if p=^a is a strict subtype of ct=^t. 
Define (^cpo> ^cpo) as follows: s ^cpo * if f° r all closed substitutions 7: fi(s~/) >q P q /^(^t), 
and s >-cpo t if for all closed substitutions 7: fJ-(sj) >q P q ^(£7)- Here, [i is given by: 

\x(x) = x if x 6 V 

^(Xx.s) = A a,T (Xx. /i(s)) if Xx.s-.u^-t 

u(s-t) = @ CT ' T (/x(s),/i(t)) \is:a=>T 

u(f(si,...,s n )) = f(u(si),...,u(s n )) 

Since n(s)[x := (i(t)] = fi(s[x := t]) (as demonstrated by an easy induction), it is not hard 
to see that (^cpOi ^cpo) is indeed a reduction pair, that the c CT are minimal elements, and 
that we can ignore the 7: since >cpo is stable, s >~cpo t holds if ^i(s) >q P q l^(t). 
Moreover, always s ■ t\ ■ ■ ■ t n ^cpo U ■ c and f(s\, . . . , s n ) ■ t ^cpo s« • c: 

• In CPO, g(u,v) >cpo w if u >cpo w, regardless of type differences. Since the @ a ' T are 
function symbols, we thus have: n(u ■ v) >cpo w if a(u) >cpo w. 

Let U : a = a\ =^ ... =^ o n =^ 1. Then fi(s ■ t) >cpo ^(U " c) if (selecting the first 
argument n - i times) u(s • h ■■■t i ) = @ CT ' T (@(. . . @(p(s), . . . //(ii-i)) , u(ti)) > C po 

a(ti ■ c). Since a is a strict subtype of a =>■ r, so @°" ,T >^ ©"i^j+i^-v^t f or a u_ ^ 
and because certainly @ <J,T (...) >cpo c o-j for all j, this indeed holds, as fi(ti ■ c) = 

• Similarly, u(f(s)-t) >cpo if /(m( s i); • • • )/ i ( s n)) >cpo M s «'c)> which holds because 
/ >p @^i+i=^»=^ for all j, and also / > F c CTj . 

Rather than altering existing definitions of HORPO and CPO with a transformation like 
the one above, we might consider definitions which natively have minimal elements - this is 
an addition which should not be hard to include in the well-foundedness proof. 
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Example 7.9. Consider the following AFS: 



o 
s 

true 
false 
nil 
cons 



• nat 



nat 

[nat] 
bool 
bool 
list 

[nat x list] : 



if 
Iteq 
from 
chain 
incch 



[bool x list x list] list 

[nat x nat] =^bool 

[nat x list] => list 

[nat =^ nat x list] => list 

list] => list 



•list 



n 



lteq(s(x), o) 
lteq(o, x) 
lteq(s(x),s(y)) 
incch(x) 
from(x, cons(y, z)) 
chain(F, cons(y, z)) 



false 
true 

lteq(x,y) 
chain(Ay. s(y), x) 



if (true, x, y) 
if (false, x, y) 
from(x, nil) 
chain(F, nil) 



x 

y 

nil 
nil 



if (lteq(x, y), cons(y, z), from(x, z)) 
cons(i ? • y, chain(i ? , from(F • y, z))) 




This AFS, which appears in the termination problem database (see [38]), has eight dependency 
pairs, and the following dependency graph: 

(1) lteq»(s(x),s(y))^lteq«(x,y) 

(2) incch*(x) ~> chain"(Ay. s(y), x) 

(3) from"(x, cons(y, z)) ^ if "(lteq(x, y), cons(y, z), from(x, z)) 

(4) from"(x, cons(y, z)) ~> lteq"(x, y) 

(5) from"(x, cons(y, z)) ^ frorrr(x, z) 

(6) chain" (F, cons(y, z)) ^ F ■ y 

(7) chain"(F, cons(y, z)) ~> chain"(F, from(F • y, z)) 

(8) chain"(F, cons(y, z)) ^> from"(F • y, z) 

We consider the SCC consisting of pairs [JJ [6] and [7J As this is a local AFS, we may 
use almost unrestricted argument functions. Let tt(s(x)) = 7r(s~(x)) = x, 7r(incch"(x)) = 
chain"(Ay. y, x), 7r(incch(x)) = chain(Ay. y, x), 7r(lteq(x, y)) = Iteq' and 7r(from)(x, y) = 
from'(y); for other symbols, n is the identity. Then the three dependency pairs of interest 
are oriented with (^cpOi ^cpo) if cons >p from': 

2) 7f(incch"(x)) = chain"(Ay. y, x) ^cpo chain"(Ay. y, x) = 7f(chain"(Ay. s~(y), x)) 

6| chain t) (F,cons(y,z)) ^cpo F ■ y 

7) chain" (F, cons(y, z)) >-qpo chain"(F, from'(z)) 

All rules, even the non-formative ones, are oriented as well, with for instance the precedence 
chain, chain" >^ cons > p from' >p if , Iteq' >^ false, true 



Iteq' 
Iteq' 
Iteq' 

chain(Ay. y, x) 
from'(cons(y, z)) 
chain(F, cons(y, z)) 



CPO 
CPO 
CPO 
CPO 
CPO 
CPO 



CPO 
CPO 
CPO 
CPO 



X 

y 

nil 
nil 



^cpo false if (true, x, y) y 

i^rDo true if (false, x, y) y 

Iteq' from'(nil) y 

chain(Ay. y, x) chain(F, nil) y 
if (Iteq', cons(y, z), from' (z)) 
cons(F • y, chain(F, from' (2))) 

The remaining dependency pair (2) is clearly tagged-chain-free, so this AFS is terminating if 
the two SCCs {0} and {((§} are tagged-chain-free. 
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8. Non-collapsing Dependency Pairs 

Many powerful aspects of the first-order dependency pair framework, such as the subterm 
criterion and usable rules, break in the presence of collapsing dependency pairs. But for parts 
of a termination proof, we may have non-collapsing dependency pairs. Consider for example 



the system from Example 7.9: the dependeny graph has three SCCs, and two of them (the 
SCCs {0} and {([5])}) are non-collapsing. Their chain- freeness can be demonstrated with a 
reduction triple which does not have the limited subterm property. 

In this section, we will briefly discuss the subterm criterion and usable rules, limited to 
non-collapsing sets V . To avoid double work between the basic and tagged dependency pair 
approach, we note that tags add very little advantage in this setting: tagging mainly plays a 
role in the limited or tagged subterm property. The primary advantage of Theorem |6.20| over 



Theorem 5.21 therefore, is the addition of formative rules. So let us revise the definition 
of chain-free: a set V of dependency pairs is chain-free if there is no minimal dependency 
chain [(pi,Si,t{) \ i E N] with all pi 6 V U {beta} such that ti -^* FR (j>} s.i + \ for all i. Here, 
FRiV) =lZ\f the AFS under consideration is not local. 

Lemma 8.1. A set V of dependency pairs is tagged-chain-free if it is chain-free. 



Proof. Obvious consequence of Theorem 6.15, by removing the tags. D 



We will consider only how to prove chain-freeness for the sets under consideration. 



8.1. The Subterm Criterion. Let V be non-collapsing, and let T~L be the set of function 
symbols / such that a left- or right-hand side of a dependency pair has the form f(s) ■ t. A 
projection function for T~L is a function v which assigns to each / G T~L a number i such that 
for all I ~> p £ V, the following function V is well-defined for both / and p: 

This differs from the first-order definition only in that we cater for dependency pairs which 
do not have the form P(li, . . . , l n ) ~» <r(pi> ■ • • ,Pm)- 

Theorem 8.2. Let V = V\ W V2 he a set of non- collapsing dependency pairs, and suppose a 
projection function v exists such that V{1) > v(p) for all I ~> p £ V\ and v(l) = u{p) for all 
I p € 7*2- Then V is chain-free if and only ifVi is. 

Proof. If V is chain-free then obviously Vi is chain-free. For the other direction, suppose Vi 
is chain- free and that we have a minimal dependency chain [(pi,Si,ti) \ i E N] over V and 
suitable projection function v. As before, we can assume this chain does not use beta, so 
always Pi = h^ p%. As the subterm relation is stable, V{li) >T>{pi) implies that v(si) >T>(ti). 

Since each ti — >\ Sj+i, we have a reduction v(si) t>^(ti) — ^ v{s2) ^^(^2) — >\ ■ ■ ■ Since 
V2 is chain-free, pi G V% for infinitely many i, so V(st) > u{ti) infinitely often. Thus we have 
an infinite — >n UO reduction starting in a terminating term V(s\), contradiction. □ 

Example 8.3. Both of the remaining SCCs of Example |7.9| are chain-free, as is evident 
with a projection ^(lteq tt ) = 1 for the SCC {(0)} and ^(frorrr 5 ) = 2 for the SCC {§}. 
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8.2. Usable Rules. Formative rules provide a nice counterpart of usable rules, but it would 
be even nicer if we had both! Usable rules can be defined, but with severe restrictions; we 
follow the ideas in [[36], where usable rules are defined for static dependency pairs. 



Definition 8.4 (Usable Rules). A term s is considered risky if it has a subterm x ■ t with 
x G FV(s). Let / ^ us g if there is a rewrite rule f(h, ...,/„) — > r where either r contains 
the symbol g, or r is risky, or r is an abstraction or variable of functional type. The 
reflexive-transitive closure of 3us is denoted by Overloading notation, let s □*,, g 

denote that either s contains a symbol / with / Zl* s g, or s is risky. 

The set of usable rules of a term s, notation UR(s, TV), consists of those rules f(li,...,l n )- 
l n+ i ■ ■ ■ l m — > r G 71 such that s □*,, /. The set of usable rules of a non-collapsing dependency 
pair I ~> f(pi, ■ ■ ■ ,p n ) • Pn+i • • -Pm is the union UR(p\,TZ) U . . . U UR(p m ,1Z). The set of 
usable rules of a set of dependency pairs, UR(V, 1Z), is the union IJpeP UR(p,1Z) if V is 
non-collapsing and just 1Z otherwise. 

Example 8.5. Consider an AFS for list manipulation which has four rules: 

map(i ? , nil) — > nil 

map(F, cons(/i, t)) — > cons(F • h, map(F, t)) 

append(nil, I) — > I 

append(cons(/i, t),l) — > cons(append(/i, t),l) 

The dependency graph of this system has two SCCs: the set {map^(-F, cons(/i, t)) ~> F ■ 
h, map^F, cons(/i, t)) ^ map"(F, t))} and the set {append^(cons(/i, t), I) ^ append" (h, t)}. 
The former contains a dependency pair with F ■ h in the right-hand side, so its usable rules 
are just 7Z. But the latter set has only the append rules as usable rules. 

Very similar to the first-order case, we can prove the following result: 

Theorem 8.6. Let V = V\ ttl V2 be a set of non- collapsing dependency pairs, and suppose 
there is a reduction pair (X, >-) such that: 

• I y p for all I ~» p G V\ 

• I h P for all I ~> p G V<i 

• Ihr ifl^r G UR(V,FR(V)) 

• p a (x,y) ^x,y for fresh symbols p a : [a x a]^a. 
Then V is chain-free if and only if V2 is chain-free. 



Here, the pair l,p is determined from l,p in a systematic way like in Section 5.5 The 



p a (x,y) >: x,y constraints are trivially oriented both with algebra interpretations and CPO. 



The proof of Theorem 8.6 takes some work, but has no novelties compared to the proof 



for the static method in [3]. We shall be relatively brief about it. 



Proof Sketch of Theorem 8.6, Let p a : [a x a] =^ a and l ff : a be new symbols for all types 
a, and let C € be the set of all rules p a (x,y) — > x, p a (x,y) — > y. We will see that any 
minimal dependency chain [(pj,Sj,tj) | i G N] with all pi G V can be transformed into a (not 
necessarily minimal) dependency chain [(pi, s^t'j) \ i G N] which uses the same dependency 
pairs, but where t\ -^-* UR ^-p fr(p))uc s 'i+i ^ or an Following the proof of Theorems 



5.16 



and 5.21 if a reduction pair as described in the theorem exists, then this transformed chain 
must use dependency pairs in V2 infinitely often, so the same holds for the original. Thus, if 
V is not chain- free, then neither is Vi. Of course, if V is chain- free then so is its subset 7-V 
To transform the minimal dependency chain [{pi, Sj,^) | i G N], we note that: 
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(I) every term has only finitely many direct reducts. 

This is obvious because 1Z is finite. Let 1l\ := FR(V) and say a symbol / is a usable symbol 
if P 3«s / f° r some dependency pair I p £ V (where Zl* s is based on 1Z\ rather than 1Z), 
or / is a constructor symbol. We assume: 

(II) UR(V,Kx)^K x . 

This is a safe assumption, because if UR{V ,TZ\) = 1Z\ the theorem is automatically satisfied. 
Now, because of (I) we can define the function ip on terminating terms, given by the clauses: 

• ip(\x. u) = Ax. ip(u) 

• (p(x • ui ■■■u n ) = x ■ (p(ui) ■ ■ ■ (p(u n ) 

• <p(f(v>l, ■ ■ ■ 

, Un) • U n +\ • • • U m ) = f(ip(m), y{u n )) ■ (p(u n+1 ) ■ ■ ■ p(u m ) if / is a usable 

symbol 

• tp(s) = p cr (/((^(ui), . . . , (p(un)) • v{u n +i) ■ ■ ■ f{u m ), D a ({t I s t})) if s : a and s = 
/(ui, . . . , u n ) ■ u n+ \ ■ ■ ■ u m with / not a usable symbol 

• ip(s) = D a ({t | s -^TZi t}) if s '■ °~ an d s does not have any of these forms 

Here, -D CT (0) = -L CT and D a (X) = p a ((p(u), D a {X \ {u})) if X is non-empty and u is 
lexicographically its smallest element (this is only defined for finite sets X). 

Writing 7^ for a substitution [x := 93(7(0;)) | x £ dom(7)], it is not hard to see that: 

(III) if s has no subterms (Ax. i) ■ u or x ■ u with x G dom(7), then 93(57) — . If all 
symbols occurring in s are usable symbols, then even 92(37) = sj^ . 

The proof holds by induction on the form of s, noting that the last case of the definition of 
99 is never applicable. With induction on the size of X it follows easily that D a {X) — >■£ 99(5) 
for any s £ X. Combining this with (III) we can derive: 

(IV) if s —^Ui t with s terminating, then 99(5) —>* UR r-p 

This holds with induction on the form of s; all the induction cases are trivial either with 
the induction hypothesis or with the observation that D a {X) — >•£ f>{u) if u & X. By the 
same observation, the base case (a headmost step) is easy if s = f(u) ■ v with / not a 
usable symbol, or if s reduces with a headmost /3-step. What remains is the case when 
s = f{u) ■ v with / a usable symbol, and the reduction is headmost: s = Z7 • v k+ \ 
and t = rj ■ v k +% But since / is a usable symbol, / — > r is a usable rule, so since 

rules are ^-normal: ip(s) = ip(ly) • ip(v k+ i) ■ ■ ■ l-f ■ ^{v k +i) ■ • • f(v m ) -+uR(V,ni) 

r^ v ■ ip{vk+i) ■ ■ ■ <p(v m ) = 92(7*7) • ip{vk+i) ■ ■ ■ <p(v m ) by (III), which equals ip(t) because either 
r has the form g(w) ■ q, or m = k (since otherwise UR(V, TZ{) = 1Z\, contradicting (II)). 

Now we are almost there. Let [(pj,Sj,£j) | i £ N] be a minimal dependency chain with 
all pi £ V, so for each i we can write p% = l%~^> Pi and Sj = Im, U = Pi"f%. Let s^ = l^f 
and t\ = pi'yf (this is well-defined because the strict subterms of Sj and ti are terminating) . 
Then by (III) and (IV) paf ->uR(p,FR(v))uC e ,in as re q uired - □ 

The notion of usable rules is in particular useful for systems with a first-order subset, as 
the usable rules of first-order dependency pairs will typically be first-order. As discussed 
in [8], we can use this to apply first-order termination proving techniques (and termination 
tools!) to a part of a higher-order dependency pair problem. 
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9. Algorithm 



In this section, we combine all the results so far in a ready-to-use algorithm. 

All the results in this paper can be readily combined in one algorithm, to prove 
termination of an AFS (local or not): 

(1) • determine whether the system is local (Definition 6.1), 
• complete the system (Definition |5.1[), 



(5) 



(6) 



determine its dependency pairs (Definition 5.4) 



calculate an approximation G for the dependency graph (Section 5.3); 



(2) remove all nodes and edges from G which are not part of a cycle (Section 5.3); 



(3) if G is empty return terminating; otherwise choose an SCC V (Section 5.3) 



(4) if V is non-collapsing, find a projection function v such that u(l) l> u{p) for all / ^ p G V, 



and v{l) > u(p) at least once (Section 8.1); if this succeeds, remove all strictly oriented 



UR{V,K) otherwise (Definition 6.10|8.4); 



pairs from G and continue with [2j otherwise continue with [5| 

a. if V is non-collapsing: 

• let S := and £ := jj; 

• let ip(s) be defined as just s; 

• let A:= UR(V, FR(V)) if K is local, A: 

b. if V is collapsing and 1Z is not local: 

• let S := T and £ := T\\ 

• let ip(s) be defined as just s; 

. let A:=KU{f(x)^ p(x) \ f G V}; 

c. if V is collapsing and 1Z is local: 

• let S be the set of function symbols / _ : a where / : a € T and / occurs below an 
abstraction in a rig ht-hand side of FR(V) U V, and let S := T\ U S; 

• let ij)(s) be defined as tag(s) (Definition 6.3); 

• let A := FR(T) tag U {/" (x) 
determine a partitioning V 



(a) 
(b) 
(c) 
(d) 
(e) 



y ij)(p) 



f(x),g-(x)^gS(x)\f-,g-eS,geV}; 
V\ W V2 and a reduction pair (Section 5.4) (y, y) with: 
• c Um for I ~> p G Pi (both sides base type, fresh x); 



Co- m for Z ~» p G (both sides base type, fresh x); 



Z • xi 

Z * x\ ' ' ' x n 

I y r for Z — > r G ^4; 

either P is non-collapsing, or >-) respects > s (Definition 6.19); 
if 1Z is local and V collapsing: 

for all feT~\S: /"(x) y /(x),/«(x) and /"(x) • y h Xi • c (**). 
if this step fails, return fail; 

suitable reduction pairs can be found with e.g. weakly monotonic algebras (Section 7.1), 
or argument functions and CPO (Section 7.2) 
(7) remove all pairs in V\ from the graph, and continue with ([2]). 

(**) Since the symbols / G T~ \ S do not occur in any of the other constraints, all the 
common reduction pairs (CPO, weakly monotonic algebras and most existing first-order 
techniques) can easily be extended to satisfy these requirements; for example, given a path 
ordering which satisfies the rest of the requirements, just add "/~ > p /" to the function 
symbol precedence. That is why we split off these requirements rather than including the 
symbols in S, and why we generally ignore this restriction on (y, y) in examples. 

This algorithm iterates over the graph approximation, removing nodes and edges until 
none remain; this technique originates in [13]. It is justified by the following observation: 
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Lemma 9.1. Let G be an approximation of the dependency graph of an AFS 1Z, and let V 
be a set of dependency pairs. Suppose that every SCO in the subgraph of G which contains 
only nodes in V is chain-free. Then also V is chain-free. 



Proof. A trivial adaptation of the proof of Lemma |5.12| O 
The algorithm seeks to prove that DP (1Z) is either tagged-chain- free (if 1Z is local) or 



chain-free (if not), which suffices by Theorems 6.15 and 5.7 respectively. 

(1) To prove that DP(JZ) is (tagged-) chain- free, it suffices to prove that all SCCs of G are 

either tagged-chain-free (if 1Z is local and V is non-collapsing) or chain-free (if 7Z is not 

local or V is collapsing); this is valid by Lemmas |5. 12 and 8.1 



Thus, until G is empty, we choose an SCC V and show that V is tagged-chain-free or 
chain-free as required if some strict subset V' is (tagged-)chain-free (using the subterm 
criterion or a reduction pair, which is justified by Theorems 5.21, 6.20 and 8.2). By 



Lemma 9.1 this is the case if all sub-SCCs V\, ■ ■ ■ , V n of V are (tagged-)chain-free. To 
see that all remaining SCCs of G and Vi, ■ ■ ■ ,V n are (tagged-)chain-free, we remove all 
strictly oriented pairs from G, and remove all nodes not on a cycle, so the SCCs of the 
result are exactly the sets that must be proved (tagged-) chain- free. 



Example 9.2. We apply the algorithm on the AFS eval 
o : M dom : [MxMxMj^M 



with the following symbols: 
eval : [MxM]4>M 



s : [M]=>M fun : 

and the following rewrite rules: 

dom(s(x),s(y),s(z)) 
dom(o,s(y),s(y)) 
eval(fun(F, x, y), z) 



MxMxMl 



x 
o 



s(dom(x,y, z)) dom(x,y, o) 
s(dom(o, y, z)) dom(o, o, z) 
F ■ (Aom(x, y,z)) 

The fun symbol represents a function over the natural numbers with an interval it is defined 
on; eval calculates its value in a point, provided the point is in the domain of the function. 
We prove termination of eval by following the algorithm. 

|I]): complete the rules, calculate the dependency pairs and approximate the dependency 
graph. The AFS eval is local. Because eval has no rules of the form I — > Xx. r, the completed 
system is the same as the original system. We have the following four dependency pairs: 



evar(fun(F, x, y), z) ~* F ■ dom(x, y, z) dom tt (s(x), s(y), s(z)) 
evar(fun(F, x, y), z) ~> 6orcr(x,y,z) donr(o, s(y),s(z)) 

We will use the following (approximation of the) dependency graph: 



dom*(x, y, z) 
donr(o, y, z) 



( 

evar(fun(-F, x, y), z) ~f F • dom(x, z) 




eval^(fun(F, rr, y),z) ~» dom^x, y, z) 




1 X 






dom^sOr), s(y), s(z)) ~> dom tt (a;, y, z) 




dom^(o, s(y), s(^)) ^ dom^(o, z) 
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Step @ remove nodes and edges not part of a cycle. 
dependency pair, and leaves the following graph: 

. Q . 



This removes the second eval^ 



evar(fun(F, x, y), z) ~> F ■ dom(x, y, z) 



dom tt (s(x),s(y),s(z)) 
CT" 



dom^(x, y, z) 



dom^(o, s(y), s(z)) ~> dom^(o, y, z) 



S'iep^.' return terminating if G is empty, otherwise choose an SCCV . Since the graph 
is not empty, we choose V = {dom"(o, s(y), s(z)) ^ dom"(o, y, z)}. 

Step 2}' apply the subterm criterion if possible. The chosen set is indeed non-collapsing; 
we choose a projection function ^(dom") = 2, and have z7(dom"(o, s(y), s(z))) = s(y) t> u = 
I/(doiTr(o, y, z)), and can remove this dependency pair from G. 

. Q . . . 



eval^(fun(F, x, y), z) ~> F ■ dom(x, y, z) 



dorrr(x, y, z) 



dom»(s(x),s(?/),s(») 

■ o ' 

Step [J|' remove nodes and edges not part of a cycle. Everything is on a cycle. 

Step 00.' choose the next SCC and apply the subterm criterion. We choose the set 
V = {dorrr(s(x), s(y), s(z)) ~> dom"(x, y, z)}, which is non-collapsing, and apply the subterm 
criterion with v = 2. Since s(y) > y, this leaves the graph with a single node: 

. Q . 



eval^(fun(F, x, y), z) ~» F ■ dom(x, y, z) 



Step \^ remove nodes and edges not part of a cycle. Everything is on a cycle. 

.Siep[3]: return terminating if G is empty, otherwise choose an SCCV. Since the graph 
is not empty, we choose V = {eval^(fun(i ? , x, y), z) ~> F ■ dom(x, y, z)}. 

Step [J}' apply the subterm criterion if possible. This is not possible, as V is collapsing. 

Step [5| - determine S, S, A and tp. Noting that the system is local, but has ab- 
stractions in neither left- nor right-hand sides, we let £ := {o, s, dom, fun, eval, dom^, eval"} 
and S := 0, while i\) is the tagging function. Since S = 0, we calculate A = FRiV) = 
F#(eval tt (fun(F, x, y), z) ~> F • dom(x, y, z)) = FR(fun(F, x, y)) U FR(z) = FR(fur\(F, x, y)), 
which consists of the rules eval(fun(F, x, y), z) — > F ■ dom(x,y,z), dom(x,y,o) — > x and 
dom(o,o, z) — > o (since not fun s). 

Step [6| - determine a suitable partitioning and reduction pair. As V consists of only one 
dependency pair, we must choose V\ = V . We have the following ordering constraints: 

eval"(fun(F, x, y), z) y F -dom(x, y,z) dom(x,y, o) y x 
eval(fun(F, x, y), z) y F-6om{x,y,z) dom(o, o, z) y o 

The first constraint is for the dependency pair, the others for the formative rules. Using 
an argument function ir which maps dom(x,y, z) to dom'(x,y) and otherwise maps f(x) to 
itself (ir is an argument filtering) , this leaves the following constraints: 

eval"(fun(F, x, y), z) y F-dom'(x,y) doir\'(x,y) y x 
eval(fun(F, x, y), z) y F • dom'(x, y) dom'(o, o) y o 

This is satisfied with (Vcpo> ^cpo) from Section 7.2, using a precedence fun >p dom' >p s, o. 
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Steps ?|[^f3; remove all pairs in V\ and everything that's not on a cycle anymore. We 



remove the last node; the graph is empty. We conclude: this AFS is terminating. 

10. Extensions 

In this section we discuss two improvements to the method in this paper: a combination 
with the static dependency pair approach, and a way to deal with AFSs with infinitely many 
rules, in particular those generated from a polymorphic AFS. 

10.1. Merging the Static and Dynamic Approach. The dynamic style of dependency 
pairs presented in this paper is not the only way to do dependency pairs; as discussed in 
Section [2] there are several strong results in static dependency pairs. Most importantly, in a 
static dependency pair approach we do not have to consider collapsing dependency pairs, 
and hence the dependency graph is usually simpler. Usable rules and the subterm criterion 
are more often applicable, and argument filterings can be used without restrictions. 

Since the dynamic approach is applicable to a larger class of AFSs, but the static 
approach gives easier constraints, it seems sensible for a termination tool to implement both. 
Static dependency pairs are defined for HRSs, but extending the proof to AFSs takes next 



to no effort, and using Lemma 6.13 we can add formative rules to it as well. Below, we give 



a short overview without proofs; for the full work on static dependency pairs, see [26, 36J. 

Definition 10.1 (AFS with Base Output Types). An AFS (J-,1Z) has base output types if 
for all / : \o\ X . . . x a n ] =>t£ J, the output type r is a base type. 



The AFS for eval from Example 9.2 has base output types, but the AFS twice does not, 
because of the symbol twice : [nat =>■ nat] =>- nat =>• nat. It is always possible to transform 
an AFS into an AFS with base output types by 77-expanding the rules [21], without losing 
non-termination; however, termination may be lost by this transformation. 

Definition 10.2 (Plain Function Passing AFS). An AFS is plain function passing (PFP) if 
for all rules f(h, . . . , l n ) — >■ r: if r contains a functional variable F, then F is one of the Zj. 

The notion is slightly simplified from the original definition, for the sake of easy explanation. 

The set of static dependency pairs of a PFP AFS with base output types consists of the 
pairs I* ~> <r(s) with I — > r a rewrite rule, r > g(s), and g a defined symbol. Note that the 
right-hand side of a static dependency pair may contain variables which do not occur in 
its left-hand side. For example, the rewrite rule l(s(n)) — > twice(Ax. \(x),n) has two static 
dependency pairs: l"(s(n)) ~> twice"(Ax. \(x),n) and l"(s(n)) ^ l"(x). 

A static dependency chain is a sequence \(pi, Si,U) | £ € N] where: 

• each pi is a static dependency pair I ~> p; 

• there is some substitution 7 such that Sj = Z7 and t\ = rj; 

• each t{ ~^*FR( P +1 ) s i+i (where FR(pi + \) = 1Z in a non-local AFS); 

• the immediate subterms of all U are "computable" (which implies termination). 

Claim 10.3. A plain function passing AFS with base output types is terminating if it does 
not have a static dependency chain. 
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Claim 10.3 can be verified by mimicking the proof in [26J for the different setting, and 



additionally using Lemma 6.13; this proof contains no novelties. 



Observing that all static dependency pairs are non-collapsing, it is worth noting that a static 



dependency chain is also a dynamic minimal dependency chain as defined in Definition 5.6 
just for a different set of dependency pairs. In the results of this paper, we did not use the 
property that the right-hand side of dependency pairs contains no new variables; thus, we 
can also use the algorithm from Section [9] to prove absence of static dependency chains. 
With static dependency pairs, we can always use case [5^,, so we have unrestricted argument 
filterings, the subterm criterion and usable rules, as we had in the HRS setting by |36) . 

Now an automatic tool could, for example, try dynamic dependency pairs, and if that 
fails but the AFS is PFP, //-expand the rules and use the same module to attempt a static 
approach. But in some cases we can do better. For instance, the dynamic dependency pairs 
for map from Example |7.6| are: 

(A) map tt (F,cons(/i,t)) ~* F-h 

(B) map tt (.F, cons(M)) ~* map^F,*) 

In the static approach, we only have pair (B). Thus, if there is a dependency chain on the 
static dependency pairs, there is also one on the dynamic ones. In cases like this, there is no 
point using the dynamic approach instead of the static one. 

Definition 10.4. We say an AFS (J-, 1Z) is strongly plain function passing (SPFP) if it is 
plain function passing, has base output types, and the right-hand sides of JZ do not have 
subterms of the form Xx. C[f(sx, . . . , s n )] where / is a defined symbol and x £ FV(f(s)). 

Theorem 10.5. A SPFP AFS admits a minimal dynamic dependency chain if it admits 
a minimal static dependency chain. A SPFP and left-linear AFS admits a minimal static 
dependency chain if and only if it is non-terminating. 

Proof. Given a SPFP AFS, all its static dependency pairs are also dynamic dependency 
pairs, so any minimal static dependency chain is a minimal dynamic dependency chain. 
If the SPFP AFS is moreover left-linear, then termination implies that there is no 



minimal dynamic dependency chain (by Theorem 5.18), let alone a static one. D 

This theorem gives a strengthening of the dynamic approach, by allowing us to remove 
collapsing dependency pairs in an AFS if it is strongly plain function passing. It also provides 
a completeness result for the static approach, for the class of SPFP systems. 

In summary, we can combine the static and dynamic approaches as follows: 

if 1Z is strongly plain function passing: return DPframework (STATIC) 
if DPframework (DYNAMIC) = TERMINATING: return TERMINATING 
if T does not have base output types : r/-expand (J 7 , 1Z) 
return DPf ramework(STATIC) 
Here, DPframework is the algorithm of Section |9j and the argument (STATIC or DYNAMIC) 
determines how the dependency pairs are calculated. Alternatively, the two frameworks may 
be run in parallel, or we might consider optimisations to avoid double work. At present, 
however, we have not done this, because testing on the current termination problem database 
shows no improvement in strength obtained from using the static approach after the dynamic 
approach has failed (although using the static approach for SPFP AFSs does significantly 



improve the power). Experimental results and statistics are given in Section 11 
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10.2. Polymorphism. In this paper we consider monomorphic AFSs. In other definitions 
of the AFS formalism, a kind of polymorphism a la ML is admitted. In a polymorphic AFS, 
we can have for instance a function symbol if : [bool x a x a] =^a with a a type variable, 
and rewrite rules if (true, x, y) — > x and if (false, x, y) — > y. 

Here a can be instantiated by base types, but also by functional types such as nat=^>nat. 
A polymorphic AFS can be transformed into a monomorphic AFS with infinitely many 
rewrite rules by considering all possible instantiations for the type variables in the rewrite 
rules. In the example above, we get for instance if [booixnatxnat^at^ru 6 ! x -, V) ~^ x an d 
if[booix(nat*nat)x(nat*nat)Hnat^nat(false,x,y) y. Such a transformation is discussed in [21]. 

In this paper we considered monomorphic AFSs with finitely many rules, so we can 
neither deal with polymorphic AFSs directly nor with their transformations to monomorphic 
AFSs. However, a further inspection of the proofs shows that finiteness of the set of rewrite 
rules is primarily used in dealing with the dependency graph. So suppose we did not pose 
this restriction, and went on as before. This leads to a dependency graph with infinitely 
many nodes. Now consider the following definition of a dependency graph approximation: 

Definition 10.6 (Infinite Dependency Graph Approximation). An (infinite) dependency 
graph A is approximated by the finite graph G if there is a mapping / from the nodes in A 
to the nodes in G, such that: if A contains an edge from node a to node b, then G contains 
an edge from node /(a) to node f(b). 

The original notion of a dependency graph approximation is an instance of this definition, 
where / is the identity. With this definition, all proofs go through essentially unmodified, 
only when considering a set V of nodes, we are interested not in the elements of V but in 



the corresponding dependency pairs. For instance in Theorem 5.16 we must see that / >~ p 
for all I ~> p G DP with /(/ p) G V\ and / y p for all / ~> p G DP with f(l — > p) G T>2- 

Example 10.7. Consider the polymorphic AFS with if as defined before, and append : 
[list(a) x list(a)]=^list(a). 



if (true, x, y) 
if (false, x, y) 
append(nil, x) 
append(cons(/i, t) , x) 



x 

y 

X 



cons(/i, append(t, x)) 



The corresponding monomorphic AFS has infinitely many rules, and infinitely many depend- 
ency pairs. All the rules generated from the append rules (such as append for list(nat) or for 
list(nat=^bool)) have only one dependency pair append|(cons(/i, t), x) ~> append^ (t, x). 
The if rules of basic types (such as when a is instantiated with nat) have no dependency 
pairs, but if we for instance consider a := [bool x nat=^nat x nat=^> nat] =^> nat=^> nat then 
the rule if CT (true, x, y) — > x does give a dependency pair if ^(true, x,y) ■ z x ■ z. 
The dependency graph is infinite, and part of it could be sketched like this: 

Q Q Q 



append)* 



CTi (cons(/i,f),x) 
append^ (t,x) 



append^ 



cons(/i, t) 



append^ (cons(h,t), 




if o-j (true, x, y) ■ z ~> x ■ 

a 



if CT2 (true,x,y) 



Z ~> X ■ z 
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For a dependency graph approximation, it makes sense to combine all the "similar" 
dependency pairs in one node. We choose the following finite graph approximation: 



Q if (true, a;, y) 



Q if (false, x, y) 




append" (cons(/t, t) , x) 
~> append* (t, x) 



3 



Here, all dependency pairs append*. (cons(/i, t), x) ~» append*, (t, x) are mapped to the append 
node, and the if CT (true, x,y) ■ z\ • ■ ■ z n ~* x ■ Z\ • • • z n are mapped to if (true, x, y) — > x. 
Note the different arrows: the append node uses a arrow, to indicate that it catches 



dependency pairs of the first kind (see Definition 5.4) which have the given form, whereas 
the if nodes use a —¥ arrow and catch dependency pairs of the second kind. 



Example 10.7 gives a good suggestion for how to split the dependency pairs into a finite 



number of groups. For a polymorphic rule, we generate the set of dependency pairs of the 
first kind as before, DP\(TZ) = {Z* ~* p* | I — > r £ 1Z \ p £ Cand(r)}; for all instances of the 
rule, the dependency pairs of the first kind will be type instantiations of a pair in DP\(TZ). 
For the nodes of the graph approximation we choose DPi(7£), and in addition those rules 
I — > r whose type is not a base type and where head(r) is either a variable or a term /(f) 
with / £ D. Now each dependency pair in the instantiated system is either mapped to the 
corresponding pair in DP\(1Z), or, for a pair of the second kind, to the rule that generated it. 

With this choice for the graph approximation we can avoid any infinite reasoning, if 
we can find a reduction pair that is equipped to prove statements of the form "I >- p for all 
type instantiations" given I and p. Finding such reduction pairs is the object of separate 
study, however. As for formative rules, it is not hard to devise an algorithm which, given a 
symbol s, finds a set of polymorphic rules PFR such that the rewrite relation generated by 
PFR is included in -^fr{s) (the difficulty is in determining how good the result of such an 
algorithm is, as it may well include more rules than strictly necessary). Usable rules require 



only that every term has only finitely many reducts (item I in the proof of Theorem 8.6); 
this is the case for systems generated from a finite set of polymorphic rules as well. 



11. Experimental Results 

In this section, we present the performance of the higher-order termination tool WANDA in 
different settings: using only dynamic dependency pairs, using only static dependency pairs, 
using both dynamic and static dependency pairs, and using only rule removal. 

The dependency pair framework described in this paper, and in particular the algorithm 
of Section forms the core of the higher-order termination tool WANDA |20j . If the input 



system is strongly plain function passing as described in Section 10.1, then collapsing 
dependency pairs are dropped. If it is not strongly plain function passing, then a static 
approach is attempted only when the dynamic approach fails. The tool WANDA uses a simple 
form of argument functions immediately (if there is any constraint f(x±, . . . , x n ) y r or 
f(xi,...,x n ),y.r then the argument function 7r(/(x)) = r is used), a proof-of-concept 
implementation of polynomial interpretations in the natural numbers, and our own version 
of a recursive path ordering (based on |22j ) with argument filterings. 
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The current termination problem database (8.0.1) contains 156 higher-order benchmarks; 
out of these, 138 are local, and 133 are plain function passing. The following table sums up 
how the various restrictions relate. 





local 


not local 


not left-linear 


not fully extended 


PFP 


123 


10 


9 


1 


Strong PFP 


88 


9 


8 


1 


Not PFP 


15 


8 


4 


6 



We executed WANDA 1.6jwith and without dependency pairs, and also once with the locality im- 
provement disabled, on a dual Intel(R) Core(TM) i5-2520M CPU @ 2.50GHz computer with 
4G RAM and a 60 second timeout; the results are summarised in the table below. An evalu- 
ation page with more details is available at http://www.few.vu.nl/~femke/lmcs20127} 





full WANDA 


dynamic DP 


static DP 


rule removal 


non-local 


YES 


122 


119 


114 


75 


100 


NO 


9 


9 


9 


9 


9 


MAYBE 


23 


26 


31 


69 


44 


TIMEOUT 


2 


2 


2 


3 


3 


average runtime 


1.33 


1.97 


1.40 


0.89 


1.82 



In rule removal a reduction pair (^:,>~) is used where >- is monotonic, and for all rules 
either I >- r or I >z r; strictly oriented rules can be removed. The timeouts are mainly due 
to WANDA's strategy of trying more advanced polynomial interpretations if simple forms fail. 
It is noticeable that the static style is a fair bit faster than the dynamic one; this is to 
be expected, since it gives both fewer and easier constraints, and the subterm criterion in 
particular often supplies a quick solution. The results for local AFSs of Section [6] give a 
significant improvement over the basic dynamic dependency pair approach, but even the 
basic result is a real improvement over rule removal. 

This table demonstrates that using a dependency pair approach, either static or dynamic, 
significantly improves the strength of an automatic termination tool for higher-order rewriting. 
Moreover, the combination of static and dynamic dependency pairs is stronger than either 
technique on its own; the two styles are truly incomparable. 

12. Conclusion 

We have presented a method to prove termination of AFSs using dynamic dependency pairs. 
A first improvement of the method is obtained, for the subclass of local AFSs, by using 
formative rules, which are a variation of the usable rules from the first-order case. Further 
improvements are obtained by the use of argument functions, which are an extension of the 
argument filterings from the first-order case, and the subterm criterion and usable rules for 
non-collapsing dependency pairs. The ordering constraints generated by the dependency 
pair approach can be solved not only using reduction pairs such as higher-order recursive 
path orderings, but also using weakly monotonic algebras. 



This is not the version which was used in the last termination competition; there, polynomial interpreta- 
tions had not yet been implemented. 
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The dependency pair approach as presented here is implemented in the higher-order 
termination tool WANDA [20] by the first author. It can be used on its own, or together with 
a static approach in an automatic termination tool. Experiments with the termination 
problem database have shown that the styles are incomparable, but have similar strength. 

With this work we aim to contribute to the understanding of termination of higher-order 
rewriting, and more in particular, to the understanding of dependency pairs, and to the 
developments of tools to automatically prove termination of higher-order rewriting. 

For future work, it would be interesting to generalise the dependency pair framework [TO] 
to the higher-order setting. This poses challenges like the question whether tags and formative 
rules should be flags, or can be phrased as dependency pair processors. In a different direction, 
we might study (and implement) the new method of formative rules in the first-order setting. 
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